Malware analysis and recovery
Abstract
A system and method detects malware by processing notifications from an intrusion detection system and baseline snapshots from an image capture utility. The image capture utility constructs an image of the suspected malware intrusion and links the suspected malware intrusion to the baseline snapshots. The system and method propagates the image of the suspected malware intrusion across multiple networks before it distinguishes malicious code, device state, and files from benign code, device state, and files. Some systems and methods include a malware recovery system that executes machine learning instructions and heuristics to revert a client and/or a remote server to one or more baseline snapshots.
- Inventors:
- Issue Date:
- Research Org.:
- Oak Ridge National Lab. (ORNL), Oak Ridge, TN (United States)
- Sponsoring Org.:
- USDOE
- OSTI Identifier:
- 1805551
- Patent Number(s):
- 10931685
- Application Number:
- 15/837,942
- Assignee:
- UT-Battelle, LLC (Oak Ridge, TN)
- DOE Contract Number:
- AC05-00OR22725
- Resource Type:
- Patent
- Resource Relation:
- Patent File Date: 12/11/2017
- Country of Publication:
- United States
- Language:
- English
Citation Formats
Smith, Jared M. Malware analysis and recovery. United States: N. p., 2021.
Web.
Smith, Jared M. Malware analysis and recovery. United States.
Smith, Jared M. Tue .
"Malware analysis and recovery". United States. https://www.osti.gov/servlets/purl/1805551.
@article{osti_1805551,
title = {Malware analysis and recovery},
author = {Smith, Jared M.},
abstractNote = {A system and method detects malware by processing notifications from an intrusion detection system and baseline snapshots from an image capture utility. The image capture utility constructs an image of the suspected malware intrusion and links the suspected malware intrusion to the baseline snapshots. The system and method propagates the image of the suspected malware intrusion across multiple networks before it distinguishes malicious code, device state, and files from benign code, device state, and files. Some systems and methods include a malware recovery system that executes machine learning instructions and heuristics to revert a client and/or a remote server to one or more baseline snapshots.},
doi = {},
journal = {},
number = ,
volume = ,
place = {United States},
year = {2021},
month = {2}
}
Save to My Library
You must Sign In or Create an Account in order to save documents to your library.