US 2025/0272401 A1Published application

Automatic generation of malware detection traps

AssigneeCommvault Systems, Inc.

InventorsOleg GOLDSHMIDT, Mori BENECH

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system and method of deployment of malware detection traps by at least one processor may include performing a first interrogation of a first Network Asset (NA) of a specific NA family; determining, based on the interrogation, a value of one or more first NA property data elements of the first NA; obtaining one or more second NA property data elements corresponding to the specific NA family; integrating the one or more first NA property data elements and the one or more second NA property data elements to generate a template data element, corresponding to the specific NA family; producing, from the template data element, a malware detection trap module; and deploying, on one or more computing devices of a computer network, one or more instantiations of the malware detection trap module as decoys of the first NA.

Claims20

Dependent claims

A computer-implemented method comprising:

by a first computing device, interrogating a first network asset in a computer network to obtain one or more properties that are specific to the first network asset;
by the first computing device, generating a template data element that corresponds to a family of network assets that include the first network asset,
wherein the template data element comprises a property that is specific to the family of network assets and further comprises at least one property among the one or more properties that are specific to the first network asset;
based on the template data element, generating, by the first computing device, a trap module that is configured to emulate one or more behaviors of the first network asset;
deploying a first instantiation of the trap module on a second computing device in the computer network;
and
by the second computing device, detecting, via the first instantiation of the trap module, an unauthorized attempt to interact with the first instantiation of the trap module.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 19/200,348Filed 6 May 2025
Priority: 9 Mar 2020
Published: 28 Aug 2025
Term ends: Not estimatedThe source records don’t support an estimate.

Classification11 codes

G06F 21/55
Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems: detecting local…
G06F 21/566
Computer malware detection or handling, e.g. anti-virus arrangements: dynamic detection, i.e. detection performed at run-time, e.g. emulation,…
G06F 21/51
Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems: at application…
G06F 21/554
Detecting local intrusion or implementing counter-measures: involving event detection and direct action

Family

Application62/986,838Us provisional application · filed 9 Mar 2020
Application17/137,384Continuation · filed 30 Dec 2020
Application18/140,511Continuation · filed 27 Apr 2023
Application18/735,835Continuation · filed 6 Jun 2024
Application19/200,348Continuation
US 11,681,804 B2Related patent
US 12,039,048 B2Related patent
US 12,321,456 B2Related patent
US 2021/0279332 A1Published application
US 2023/0259626 A1Published application
US 2024/0320339 A1Published application
US 2025/0272401 A1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key