Methods, media, and systems for detecting attack on a digital processing device
Abstract
Methods, media, and systems for detecting attack are provided. In some embodiments, the methods include: comparing at least part of a document to a static detection model; determining whether attacking code is included in the document based on the comparison of the document to the static detection model; executing at least part of the document; determining whether attacking code is included in the document based on the execution of the at least part of the document; and if attacking code is determined to be included in the document based on at least one of the comparison of the document to the static detection model and the execution of the at least part of the document, reporting the presence of an attack. In some embodiments, the methods include: selecting a data segment in at least one portion of an electronic document; determining whether the arbitrarily selected data segment can be altered without causing the electronic document to result in an error when processed by a corresponding program; in response to determining that the arbitrarily selected data segment can be altered, arbitrarily altering the data segment in the at least one portion of the electronic document to produce an altered electronic document;more »
- Inventors:
- Issue Date:
- Research Org.:
- Pacific Northwest National Laboratory (PNNL), Richland, WA (United States)
- Sponsoring Org.:
- USDOE
- OSTI Identifier:
- 1149603
- Patent Number(s):
- 8789172
- Application Number:
- 12/406,814
- Assignee:
- The Trustees of Columbia University in the City of New York (New York, NY)
- Patent Classifications (CPCs):
-
G - PHYSICS G06 - COMPUTING G06F - ELECTRIC DIGITAL DATA PROCESSING
- DOE Contract Number:
- AC05-76RL01830
- Resource Type:
- Patent
- Country of Publication:
- United States
- Language:
- English
- Subject:
- 97 MATHEMATICS AND COMPUTING
Citation Formats
Stolfo, Salvatore J., Li, Wei-Jen, Keromylis, Angelos D., and Androulaki, Elli. Methods, media, and systems for detecting attack on a digital processing device. United States: N. p., 2014.
Web.
Stolfo, Salvatore J., Li, Wei-Jen, Keromylis, Angelos D., & Androulaki, Elli. Methods, media, and systems for detecting attack on a digital processing device. United States.
Stolfo, Salvatore J., Li, Wei-Jen, Keromylis, Angelos D., and Androulaki, Elli. Tue .
"Methods, media, and systems for detecting attack on a digital processing device". United States. https://www.osti.gov/servlets/purl/1149603.
@article{osti_1149603,
title = {Methods, media, and systems for detecting attack on a digital processing device},
author = {Stolfo, Salvatore J. and Li, Wei-Jen and Keromylis, Angelos D. and Androulaki, Elli},
abstractNote = {Methods, media, and systems for detecting attack are provided. In some embodiments, the methods include: comparing at least part of a document to a static detection model; determining whether attacking code is included in the document based on the comparison of the document to the static detection model; executing at least part of the document; determining whether attacking code is included in the document based on the execution of the at least part of the document; and if attacking code is determined to be included in the document based on at least one of the comparison of the document to the static detection model and the execution of the at least part of the document, reporting the presence of an attack. In some embodiments, the methods include: selecting a data segment in at least one portion of an electronic document; determining whether the arbitrarily selected data segment can be altered without causing the electronic document to result in an error when processed by a corresponding program; in response to determining that the arbitrarily selected data segment can be altered, arbitrarily altering the data segment in the at least one portion of the electronic document to produce an altered electronic document; and determining whether the corresponding program produces an error state when the altered electronic document is processed by the corresponding program.},
doi = {},
journal = {},
number = ,
volume = ,
place = {United States},
year = {Tue Jul 22 00:00:00 EDT 2014},
month = {Tue Jul 22 00:00:00 EDT 2014}
}
Save to My Library
You must Sign In or Create an Account in order to save documents to your library.
Works referenced in this record:
Systems and methods for detecting malicious PDF network content
patent, March 2015
- Staniford, Stuart; Aziz, Ashar
- US Patent Document 8,997,219
Systems and methods for automatically detecting backdoors
patent, March 2015
- Singh, Abhishek; Manni, Jayaraman
- US Patent Document 8,990,944
Automatic immune system for computers and computer networks
patent, August 1995
- Arnold, William C.; Chess, David M.; Kephart, Jeffrey O.
- US Patent Document 5,440,723
Apparatus and method for electronic mail virus detection and elimination
patent, March 1999
- Ji, Shuang; Chen, Eva; Liang, Yung Chang
- US Patent Document 5,889,943
Method of identifying data type and locating in a file
patent, November 1999
- Shaner, Richard
- US Patent Document 5,991,714
Optical scanning system for surface inspection
patent, June 2000
- Leslie, Brian C.; Nikoonahad, Mehrdad; Wells, Keith
- US Patent Document 6,081,325
Method and apparatus for detecting a macro computer virus using static analysis
patent, February 2004
- Ko, Cheuk W.
- US Patent Document 6,697,950
Authenticating executable code and executions thereof
patent, June 2007
- Luo, Chenghui; Zhao, Jian
- US Patent Document 7,236,610
Host-based detection and prevention of malicious code propagation
patent, January 2008
- Szor, Peter
- US Patent Document 7,325,185
Prevention of software tampering
patent, January 2009
- Olson, Erik B.; Zinda, Eric K.
- US Patent Document 7,478,233
Generating a hierarchical data structure associated with a plurality of known arbitrary-length bit strings used for detecting whether an arbitrary-length bit string input matches one of a plurality of known arbitrary-length bit string
patent, September 2010
- Artan, Nabi Sertac; Chao, H. Jonathan
- US Patent Document 7,805,460
System and Method for Detecting and Repairing Document-Infecting Viruses Using Dynamic Heuristics
patent-application, June 2002
- Chess, David M.; Kephart, Jeffreyo; Ford, Richard A.
- US Patent Application 09/163250; 20020073055
Protocol-parsing state machine and method of using same
patent-application, January 2003
- Gupta, Ramesh M.; Jain, Parveen K.; Amidon, Keith E.
- US Patent Application 10/172803; 20030014662
Method and apparatus for sociological data mining
patent-application, September 2003
- Charnock, Elizabeth; Roberts, Steven L.; Holsinger, David J.
- US Patent Application 10/358759; 20030182310
Optical antivirus firewall for internet, LAN, and WAN computer applications
patent-application, December 2003
- Bango, Joseph J.
- US Patent Application 10/455826; 20030229810
Information reservoir
patent-application, June 2004
- Burgoon, David Alford; Davis, Mark D.; Dorow, Kevin E.
- US Patent Application 10/684975; 20040111410
Network security apparatus and method
patent-application, January 2005
- Hall, Aron
- US Patent Application 10/824273; 20050022028
Technique for detecting executable malicious code using a combination of static and dynamic analyses
patent-application, May 2005
- Khazan, Roger I.; Rabek, Jesse C.; Lewandowski, Scott M.
- US Patent Application 10/464828; 20050108562
System and process for managing network traffic
patent-application, November 2005
- Peng, Tao
- US Patent Application 10/841381; 20050249214
Document genealogy
patent-application, December 2005
- Smith, Mark D.; Simmons, John D.
- US Patent Application 11/132182; 20050273698
Apparatus method and medium for identifying files using n-gram distribution of data
patent-application, January 2006
- Stolfo, Salvatore J.; Herzog, Benjamin
- US Patent Application 10/986432; 20060015630
System and method for controlling inter-application association through contextual policy control
patent-application, February 2006
- Schafer, Stuart; Sheehan, John
- US Patent Application 11/191595; 20060036570
Apparatus and method for detecting malicious code embedded in office document
patent-application, June 2006
- Park, Jae Woo; Kim, Won Ho; Moon, Jung Hwan
- US Patent Application 11/211057; 20060129603
System and method for identity-based fraud detection for transactions using a plurality of historical identity records
patent-application, July 2006
- Cook, Mike; Blue, Joseph; DiChiarra, Christer J.
- US Patent Application 11/149516; 20060149674
Software self-defense systems and methods
patent-application, October 2007
- Horning, James J.; Sibert, W. Olin; Tarjan, Robert E.
- US Patent Document 11/506321; 20070234070
Detecting suspicious embedded malicious content in benign file formats
patent-application, January 2008
- Satish, Sourabh; Hernacki, Brian
- US Patent Application 11/475664; 20080010538
Systems and methods for the prevention of unauthorized use and manipulation of digital content
patent-application, July 2008
- Merkle, James A.; LeVine, Richard B.; Lee, Andrew R.
- US Patent Application 12/008320; 20080178299
Method and Apparatus for Deep Packet Inspection
patent-application, August 2008
- Mangione-Smith, William; Cho, Young H.
- US Patent Application 11/574878; 20080189784
Systems and Methods for Watermarking Software and Other Media
patent-application, September 2008
- Horne, William G.; Maheshwari, Umesh; Tarjan, Robert E.
- US Patent Application 11/927220; 20080215891
Method and Apparatus for Detecting Malware Infection
patent-application, July 2009
- Gu, Guofei; Porras, Phillip Andrew; Fong, Martin
- US Patent Application 12/098334; 20090172815
N-gram-based detection of new malicious code
conference, January 2004
- Abou-Assaleh, T.; Cercone, N.; Keselj, V.
- Computer Software and Applications Conference, 2004. COMPSAC 2004. Proceedings of the 28th Annual International
Instance-based learning algorithms
journal, January 1991
- Aha, David W.; Kibler, Dennis; Albert, Marc K.
- Machine Learning, Vol. 6, Issue 1, p. 37-66
Randomized instruction set emulation to disrupt binary code injection attacks
conference, January 2003
- Barrantes, Elena Gabriela; Ackley, David H.; Palmer, Trek S.
- CCS '03 Proceedings of the 10th ACM conference on Computer and communications security, p. 281-289
Can machine learning be secure?
conference, January 2006
- Barreno, Marco; Nelson, Blaine; Sears, Russell
- ASIACCS '06 Proceedings of the 2006 ACM Symposium on Information, computer and communications security, p. 16-25
Space/time trade-offs in hash coding with allowable errors
journal, July 1970
- Bloom, Burton H.
- Communications of the ACM, Vol. 13, Issue 7, p. 422-426
Macro virus identification problems
journal, January 1998
- Bontchev, Vesselin
- Computers & Security, Vol. 17, Issue 1, p. 69-89
Nearest neighbor pattern classification
journal, January 1967
- Cover, T.; Hart, P.
- IEEE Transactions on Information Theory, Vol. 13, Issue 1, p. 21-27
On deriving unknown vulnerabilities from zero-day polymorphic and metamorphic worm exploits
conference, January 2005
- Crandall, Jedidiah R.; Su, Zhendong; Wu, S. Felix
- Proceedings of the 12th ACM conference on Computer and communications security - CCS '05
Gauging Similarity with n-Grams: Language-Independent Categorization of Text
journal, February 1995
- Damashek, M.
- Science, Vol. 267, Issue 5199
The Mahalanobis distance
journal, January 2000
- De Maesschalck, R.; Jouan-Rimbaud, D.; Massart, D. L.
- Chemometrics and Intelligent Laboratory Systems, Vol. 50, Issue 1, p. 1-18
Deep packet inspection using parallel Bloom filters
conference, January 2003
- Dharmapurikar, S.; Krishnamurthy, P.; Sproull, T.
- High Performance Interconnects, 2003. Proceedings. 11th Symposium on
Anomaly detection using call stack information
conference, January 2003
- Feng, H. H.; Kolesnikov, O. M.; Fogla, P.
- Security and Privacy, 2003. Proceedings. 2003 Symposium on
Evading network anomaly detection systems: formal reasoning and practical techniques
conference, January 2006
- Fogla, Prahlad; Lee, Wenke
- CCS '06 Proceedings of the 13th ACM conference on Computer and communications security, p. 59-68
A sense of self for Unix processes
conference, January 1996
- Forrest, S.; Hofmeyr, S. A.; Somayaji, A.
- Security and Privacy, 1996. Proceedings., 1996 IEEE Symposium on
Kolmogorov complexity estimates for detection of viruses in biologically inspired security systems: A comparison with traditional approaches
journal, November 2003
- Goel, Sanjay; Bush, Stephen F.
- Complexity, Vol. 9, Issue 2
A linear space algorithm for computing maximal common subsequences
journal, June 1975
- Hirschberg, D. S.
- Communications of the ACM, Vol. 18, Issue 6, p. 341-343
RandSys: Thwarting Code Injection Attacks with System Service Interface Randomization
conference, October 2007
- Jiang, Xuxian; Wangz, Helen J.; Xu, Dongyan
- 2007 26th IEEE International Symposium on Reliable Distributed Systems (SRDS 2007)
Malware phylogeny generation using permutations of code
journal, September 2005
- Karim, Md. Enamul.; Walenstein, Andrew; Lakhotia, Arun
- Journal in Computer Virology, Vol. 1, Issue 1-2, p. 13-23
Countering code-injection attacks with instruction-set randomization
conference, January 2003
- Kc, Gaurav S.; Keromytis, Angelos D.; Prevelakis, Vassilis
- CCS '03 Proceedings of the 10th ACM conference on Computer and communications security, p. 272-280
Honeycomb: creating intrusion detection signatures using honeypots
journal, January 2004
- Kreibich, Christian; Crowcroft, Jon
- ACM SIGCOMM Computer Communication Review, Vol. 34, Issue 1, p. 51-56
Recent Advances in Intrusion Detection
book, January 2006
- Valdes, Alfonso; Zamboni, Diego
- Lecture Notes in Computer Science
Service specific anomaly detection for network intrusion detection
conference, January 2002
- Krügel, Christopher; Toth, Thomas; Kirda, Engin
- SAC '02 Proceedings of the 2002 ACM symposium on Applied computing, p. 201-208
Thwarting Attacks in Malcode-Bearing Documents by Altering Data Sector Values
September 2008
- Li, Wei-Jen; Stolfo, Salvatore J.
- Columbia University, 16 p.
- CUCS-025-09
Fileprints: identifying file types by n-gram analysis
conference, January 2005
- Li, Wei-Jen; Wang, Ke; Stolfo, S. J.
- Information Assurance Workshop, 2005. IAW '05. Proceedings from the Sixth Annual IEEE SMC
Fast and automated generation of attack signatures: a basis for building self-protecting servers
conference, January 2005
- Liang, Zhenkai; Sekar, R.
- CCS '05 Proceedings of the 12th ACM conference on Computer and communications security, p. 213-222
Bloodhound: Searching Out Malicious Input in Network Flows for Automatic Repair Validation
report, January 2006
- Locasto, Michael E.; Burnside, Matthew; Keromytis, Angelos D.
- Columbia University, 17 p.
- CUCS-016-06
Characterizing the behavior of a program using multiple-length N-grams
conference, January 2000
- Marceau, Carla
- NSPW '00 Proceedings of the 2000 workshop on New security paradigms, p. 101-110
Content based file type detection algorithms
conference, January 2003
- McDaniel, M.; Heydari, M. H.
- System Sciences, 2003. Proceedings of the 36th Annual Hawaii International Conference on
Internet quarantine: requirements for containing self-propagating code
conference, January 2003
- Moore, D.; Shannon, C.; Voelker, G. M.
- IEEE INFOCOM 2003. Twenty-second Annual Joint Conference of the IEEE Computer and Communications Societies (IEEE Cat. No.03CH37428)
Universal one-way hash functions and their cryptographic applications
conference, January 1989
- Naor, M.; Yung, M.
- Proceedings of the twenty-first annual ACM symposium on Theory of computing - STOC '89
Paragraph: Thwarting Signature Learning by Training Maliciously
book, January 2006
- Newsome, James; Karp, Brad; Song, Dawn
- Recent Advances in Intrusion Detection, p. 81-105
Polygraph: Automatically Generating Signatures for Polymorphic Worms
conference, January 2005
- Newsome, J.; Karp, B.; Song, D.
- Security and Privacy, 2005 IEEE Symposium on
A practical mimicry attack against powerful system-call monitors
conference, January 2008
- Parampalli, Chetan; Sekar, R.; Johnson, Rob
- Proceedings of the 2008 ACM symposium on Information, computer and communications security - ASIACCS '08
Misleading worm signature generators using deliberate noise injection
conference, January 2006
- Perdisci, R.; Dagon, D.; Lee, Wenke
- Security and Privacy, 2006 IEEE Symposium on
Data mining methods for detection of new malicious executables
conference, January 2001
- Schultz, M. G.; Eskin, E.; Zadok, F.
- Security and Privacy, 2001. S&P 2001. Proceedings. 2001 IEEE Symposium on
Specification-based anomaly detection: a new approach for detecting network intrusions
conference, January 2002
- Sekar, R.; Gupta, A.; Frullo, J.
- CCS '02 Proceedings of the 9th ACM conference on Computer and communications security, p. 265-274
On the effectiveness of address-space randomization
conference, January 2004
- Shacham, Hovav; Page, Matthew; Pfaff, Ben
- Proceedings of the 11th ACM conference on Computer and communications security, p. 298-307
On the infeasibility of modeling polymorphic shellcode
conference, January 2007
- Song, Yingbo; Locasto, Michael E.; Stavrou, Angelos
- CCS '07 Proceedings of the 14th ACM conference on Computer and communications security, p. 541-551
"Why 6?" Defining the operational limits of stide, an anomaly-based intrusion detector
conference, January 2002
- Tan, K. M. C.; Maxion, R. A.
- Security and Privacy, 2002. Proceedings. 2002 IEEE Symposium on
Mimicry attacks on host-based intrusion detection systems
conference, January 2002
- Wagner, David; Soto, Paolo
- CCS '02 Proceedings of the 9th ACM conference on Computer and communications security, p. 255-264
Intrusion detection via static analysis
conference, January 2001
- Wagner, D.; Dean, R.
- Security and Privacy, 2001. S&P 2001. Proceedings. 2001 IEEE Symposium on
Shield: vulnerability-driven network filters for preventing known vulnerability exploits
journal, October 2004
- Wang, Helen J.; Guo, Chuanxiong; Simon, Daniel R.
- ACM SIGCOMM Computer Communication Review, Vol. 34, Issue 4
SigFree: A Signature-Free Buffer Overflow Attack Blocker
journal, January 2010
- Wang, Xinran; Pan, Chi-Chun; Liu, Peng
- IEEE Transactions on Dependable and Secure Computing, Vol. 7, Issue 1, p. 65-79
Toward Automated Dynamic Malware Analysis Using CWSandbox
journal, March 2007
- Willems, Carsten; Holz, Thorsten; Freiling, Felix
- IEEE Security and Privacy Magazine, Vol. 5, Issue 2, p. 32-39
Works referencing / citing this record:
System, apparatus and method for using malware analysis results to drive adaptive instrumentation of virtual machines to improve exploit detection
patent, August 2017
- Ismael, Osman Abdoul
- US Patent Document 9,736,179
Multistage system and method for analyzing obfuscated content for malware
patent, June 2017
- Malik, Amit; Deshpande, Shivani; Singh, Abhishek
- US Patent Document 9,690,936
Framework for classifying an object as malicious with machine learning for deploying updated predictive models
patent, June 2017
- Singh, Abhishek; Mesdaq, Ali; Das, Anirban
- US Patent Document 9,690,933
Selective system call monitoring
patent, June 2017
- Ha, Phung-Te; Xu, Wei
- US Patent Document 9,690,606
System and method for detecting anomalous behaviors using a virtual machine environment
patent, May 2017
- Aziz, Ashar
- US Patent Document 9,661,018
Network-based malware detection
patent, May 2017
- Karandikar, Shrikrishna; Amin, Muhammad; Deshpande, Shivani
- US Patent Document 9,661,009
Electronic device for aggregation, correlation and consolidation of analysis attributes
patent, May 2017
- Manni, Jayaraman; Eun, Philip; Berrow, Michael M.
- US Patent Document 9,641,546
Advanced persistent threat (APT) detection center
patent, April 2017
- Haq, Thoufique; Zhai, Jinjian; Pidathala, Vinay
- US Patent Document 9,628,507
System and method for bot detection
patent, April 2017
- Aziz, Ashar; Lai, Wei-Lung; Manni, Jayaraman
- US Patent Document 9,628,498
Malicious content analysis with multi-version application support within single operating environment
patent, April 2017
- Khalid, Yasir; Amin, Muhammad; Jing, Emily
- US Patent Document 9,626,509
System and method of detecting delivery of malware based on indicators of compromise from different sources
patent, March 2017
- Rivlin, Alexandr; Mehra, Divyesh; Uyeno, Henry
- US Patent Document 9,609,007
Return-oriented programming detection
patent, March 2017
- Thioux, Emmanuel; Lin, Yichong
- US Patent Document 9,594,912
Detecting malware based on reflection
patent, March 2017
- Jain, Varun; Singh, Abhishek
- US Patent Document 9,594,904
System and method for signature generation
patent, March 2017
- Aziz, Ashar
- US Patent Document 9,591,020
System and method for offloading packet processing and static analysis operations
patent, March 2017
- Amin, Muhammad; Mehmood, Masood; Ramaswamy, Ramaswamy
- US Patent Document 9,591,015
Systems and methods for computer worm defense
patent, December 2016
- Aziz, Ashar
- US Patent Document 9,516,057
Optimized resource allocation for virtual machines within a malware content detection system
patent, November 2016
- Ismael, Osman Abdoul
- US Patent Document 9,495,180
Methods for detecting file altering malware in VM based analysis
patent, November 2016
- Paithane, Sushant; Vashisht, Sai; Yang, Raymond
- US Patent Document 9,483,644
Computer exploit detection using heap spray pattern matching
patent, September 2016
- Thioux, Emmanuel; Vashisht, Sai; Vincent, Michael
- US Patent Document 9,438,623
Systems and methods for analyzing malicious PDF network content
patent, September 2016
- Staniford, Stuart; Aziz, Ashar
- US Patent Document 9,438,622
Dynamic content activation for automated analysis of embedded objects
patent, September 2016
- Paithane, Sushant; Vashisht, Sai
- US Patent Document 9,438,613
System, apparatus and method for detecting a malicious attack based on static analysis of a multi-flow object
patent, August 2016
- Khalid, Yasir; Deshpande, Shivani; Amin, Muhammad
- US Patent Document 9,432,389
Distributed systems and methods for automatically detecting unknown bots and botnets
patent, August 2016
- Mushtaq, Atif; Rosenberry, Todd; Aziz, Ashar
- US Patent Document 9,430,646
System, device and method for detecting a malicious attack based on communcations between remotely hosted virtual machines and malicious web servers
patent, July 2016
- Karandikar, Shrikrishna; Amin, Muhammad; Deshpande, Shivani
- US Patent Document 9,398,028
Framework for efficient security coverage of mobile software applications using symbolic execution to reach regions of interest within an application
patent, June 2016
- Ismael, Osman Abdoul; Song, Dawn; Xue, Hui
- US Patent Document 9,367,681
System and method of detecting delivery of malware using cross-customer data
patent, June 2016
- Rivlin, Alexandr; Mehra, Divyesh; Uyeno, Henry
- US Patent Document 9,363,280
File extraction from memory dump for malicious content analysis
patent, May 2016
- Thioux, Emmanuel; Amin, Muhammad; Ismael, Osman Abdoul
- US Patent Document 9,355,247
Correlation and consolidation of analytic data for holistic view of a malware attack
patent, April 2016
- Manni, Jayaraman; Eun, Philip; Berrow, Michael M.
- US Patent Document 9,311,479
System, apparatus and method for automatically verifying exploits within suspect objects and highlighting the display information associated with the verified exploits
patent, April 2016
- Aziz, Ashar; Amin, Muhammad; Ismael, Osman Abdoul
- US Patent Document 9,306,974
Systems and methods for unauthorized activity defense
patent, April 2016
- Aziz, Ashar
- US Patent Document 9,306,960
System and method for detecting malicious links in electronic messages
patent, March 2016
- Pidathala, Vinay; Uyeno, Henry
- US Patent Document 9,300,686
Fuzzy hash of behavioral results
patent, March 2016
- Mesdaq, Ali; Westin, III, Paul L.
- US Patent Document 9,294,501
System and method for analyzing packets
patent, March 2016
- Aziz, Ashar; Radhakrishnan, Ramesh; Ismael, Osman Abdoul
- US Patent Document 9,282,109
Detection efficacy of virtual machine-based analysis with application specific events
patent, February 2016
- Paithane, Sushant; Vashisht, Sai
- US Patent Document 9,262,635
Framework for iterative analysis of mobile software applications
patent, December 2015
- Ismael, Osman Abdoul; Song, Dawn; Aziz, Ashar
- US Patent Document 9,225,740
Dynamically remote tuning of a malware content detection system
patent, December 2015
- Vincent, Michael; Thioux, Emmanuel; Vashisht, Sai
- US Patent Document 9,223,972
Framework for efficient security coverage of mobile software applications
patent, November 2015
- Ismael, Osman Abdoul; Song, Dawn; Aziz, Ashar
- US Patent Document 9,176,843
Systems and methods for detecting malicious PDF network content
patent, August 2015
- Staniford, Stuart; Aziz, Ashar
- US Patent Document 9,118,715
Framework for efficient security coverage of mobile software applications installed on mobile devices
patent, April 2015
- Ismael, Osman Abdoul; Song, Dawn
- US Patent Document 9,009,823