METHOD AND SYSTEM FOR DETECTING OBFUSCATED MALICIOUS COMMANDS IN SYSTEM CONSOLE OF OPERATING SYSTEM Russian patent published in 2025 - IPC G06F21/56 G06F12/14 

FIELD: computer engineering.

SUBSTANCE: said result is achieved by implementing a method for detecting obfuscated malicious commands in an OS system console, in which: data on executable commands are obtained; presenting them as sets of categorical variables; calculating occurrence of variables in commands; obtaining instruction representations in form of a numerical vector; performing clustering and selecting clusters with dominant shares of obfuscated malicious and legitimate commands; processing the obtained vectors using a machine learning model and obtaining a probability estimate value for the commands that the command is an obfuscated malicious command; commands below the threshold value are excluded from the set, as well as commands that are closer to clusters with a dominant share of legitimate commands; adding commands to the set, which are closer to clusters with a dominant share of obfuscated malicious commands; for each instruction from the set, an abnormality estimate value is obtained; excluding typical commands by threshold value of abnormality; detecting obfuscated malicious commands.

EFFECT: higher security of the operating system.

7 cl, 3 dwg