Back to results
US 9,852,290 B1Granted
Systems and methods of analyzing a software component
AssigneeThe Boeing Company
InventorsTerrance J. Kirk, Matthew S. Bialek, Shaun Kospiah, Timothy M. Lemm, Scott G. Thompson
Life of this patent
Estimating the term…
Abstract
A particular method includes generating, at a device, a first digital identifier of a first software component. The method also includes performing a comparison of the first digital identifier to one or more second digital identifiers in a database. The method further includes generating first data indicating recommended procedures to analyze the first software component based on the comparison.
Claims20
A method comprising:
- generating a first digital identifier of a first software component;
- performing a comparison of the first digital identifier to one or more second digital identifiers in a database to select a particular second digital identifier that partially or fully matches the first digital identifier, wherein the comparison includes comparing an observed behavior datum from executing the first software component with behavior data, in the database, associated with the particular second digital identifier, the behavior data generated from execution of a second software component corresponding to the particular second digital identifier;
- based on the comparison, generating first data indicating recommended procedures to analyze the first software component for malware;
- communicating, to a computing device, the recommended procedures;
- analyzing the first software component based on the recommended procedures;
- and
- sending, to the computing device, results of analyzing the first software component, wherein the results include second recommended procedures to detect execution of the first software component at the computing device based on correlation analysis data generated by comparing data from analyzing the first software component with analysis data in the database.
4 more elements
A system comprising:
- a processor;
- a memory storing instructions that, when executed by the processor, cause the processor to perform operations comprising:
- generating a first digital identifier of a first software component;
- performing a comparison of the first digital identifier to one or more second digital identifiers in a database to select a particular second digital identifier that partially or fully matches the first digital identifier, wherein performing the comparison includes comparing an observed behavior datum from executing the first software component with behavior data, in the database, associated with the particular second digital identifier, the behavior data generated from execution of a second software component corresponding to the particular second digital identifier;
- and
- based on the comparison, generating first data indicating recommended procedures to analyze the first software component for malware;
- communicating the recommended procedures to a second device;
- analyzing the first software component based on the recommended procedures;
- and
- sending, to the second device, results of analyzing the first software component, wherein the results include second recommended procedures to detect execution of the first software component at the second device based on correlation analysis data generated by comparing data from analyzing the first software component with analysis data in the database.
7 more elements
A non-transitory computer-readable storage device storing instructions that, when executed by a processor of a first device, cause the processor to perform operations comprising:
- generating a first digital identifier of a first software component;
- performing a comparison of the first digital identifier to one or more second digital identifiers in a database to select a particular second digital identifier that partially or fully matches the first digital identifier, wherein the comparison includes comparing an observed behavior datum from executing the first software component with behavior data associated with the particular second digital identifier, the behavior data generated from execution of a second software component corresponding to the particular second digital identifier;
- based on the comparison, generating first data indicating recommended procedures to analyze the first software component for malware;
- communicating, to a second device, the recommended procedures;
- analyzing the first software component based on the recommended procedures;
- and
- sending, to the second device, results of analyzing the first software component, wherein the results include second recommended procedures to detect execution of the first software component at the second device based on correlation analysis data generated by comparing data from analyzing the first software component with analysis data in the database.
4 more elements
Dependencies are inferred from the claim text.