FIELD: malicious behavior cases detection.
SUBSTANCE: invention relates to solutions for detecting cases of malicious behavior based on the exploitation of vulnerabilities in trusted processes. The specified effect is achieved by joint application of a module that includes a machine learning algorithm and a stochastic modeling tool, namely the Markov chain. On the basis of Markov chains, basic models of the behavior of each trusted process are formed, while each event that occurs is determined by a weighting factor. The event weight indicates the probability that the event will occur during the execution of the trusted process.
EFFECT: improving the efficiency of detecting anomalies in the behavior of trusted processes.
10 cl, 5 dwg
| Title | Year | Author | Number |
|---|---|---|---|
| PROTECTION METHOD OF VEHICLE CONTROL SYSTEMS AGAINST INTRUSIONS | 2019 |
|
RU2737229C1 |
| METHOD OF SELECTIVE USE OF PATTERNS OF DANGEROUS PROGRAM BEHAVIOR | 2017 |
|
RU2665909C1 |
| SYSTEM AND METHOD FOR DETECTING AND MEASURING ANOMALIES IN SIGNALLING ORIGINATING FROM COMPONENTS USED IN INDUSTRIAL PROCESSES | 2020 |
|
RU2784925C1 |
| SYSTEM AND METHOD OF ADAPTING PATTERNS OF DANGEROUS PROGRAM BEHAVIOR TO USERS' COMPUTER SYSTEMS | 2017 |
|
RU2652448C1 |
| SYSTEMS AND METHODS FOR DETECTING BEHAVIOURAL THREATS | 2019 |
|
RU2778630C1 |
| SYSTEMS AND METHODS FOR DETECTING BEHAVIOURAL THREATS | 2019 |
|
RU2772549C1 |
| SYSTEMS AND METHODS FOR DETECTING BEHAVIOURAL THREATS | 2019 |
|
RU2803399C2 |
| SYSTEM AND METHOD FOR DETERMINING PROCESS ASSOCIATED WITH MALWARE ENCRYPTING COMPUTER SYSTEM FILES | 2020 |
|
RU2770570C2 |
| MALWARE FILES IN NETWORK TRAFFIC DETECTION SERVER AND METHOD | 2018 |
|
RU2680736C1 |
| METHOD AND SYSTEM FOR DETERMINING MALICIOUS ACTIVITY BY ANALYZING THE BEHAVIOUR OF OBJECTS IN NON-INSULATED ENVIRONMENT | 2020 |
|
RU2743620C1 |
