FIELD: computing technology.
SUBSTANCE: malware detection computer system comprises a behavioural analyser comprising a set of neural networks trained to determine whether a controlled software object is malicious in accordance with a sequence of computational events caused by the execution of the corresponding object. When the behavioural analyser indicates that a program object is malicious, a memory classifier is executed comprises another set of neural networks trained to determine whether the monitored object is malicious, according to the snapshot dump of the monitored object.
EFFECT: reduced level of false positive results of malware detection.
19 cl, 19 dwg
Title | Year | Author | Number |
---|---|---|---|
METHOD AND SYSTEM FOR SEARCHING FOR SIMILAR MALWARE BASED ON RESULTS OF THEIR DYNAMIC ANALYSIS | 2020 |
|
RU2738344C1 |
SYSTEMS AND METHODS FOR DETECTING BEHAVIOURAL THREATS | 2019 |
|
RU2778630C1 |
SYSTEMS AND METHODS FOR DETECTING BEHAVIOURAL THREATS | 2019 |
|
RU2803399C2 |
SYSTEMS AND METHODS OF DEVICES AUTOMATIC DETECTION | 2017 |
|
RU2742824C2 |
SYSTEMS AND METHODS FOR DETECTING BEHAVIOURAL THREATS | 2019 |
|
RU2772549C1 |
METHOD AND SYSTEM FOR DETERMINING MALICIOUS ACTIVITY BY ANALYZING THE BEHAVIOUR OF OBJECTS IN NON-INSULATED ENVIRONMENT | 2020 |
|
RU2743620C1 |
SYSTEM AND METHODS FOR DECRYPTING NETWORK TRAFFIC IN A VIRTUALIZED ENVIRONMENT | 2017 |
|
RU2738021C2 |
DOUBLE SELF-TEST OF MEMORY FOR PROTECTION OF MULTIPLE NETWORK ENDPOINTS | 2016 |
|
RU2714607C2 |
COMPUTER SECURITY SYSTEMS AND METHODS USING ASYNCHRONOUS INTROSPECTION EXCEPTIONS | 2016 |
|
RU2703156C2 |
SYSTEM AND METHOD OF CREATING ANTIVIRUS RECORD | 2018 |
|
RU2697954C2 |
Authors
Dates
2023-09-05—Published
2021-04-21—Filed