Search International and National Patent Collections

1. (WO2018177602) MALWARE DETECTION IN APPLICATIONS BASED ON PRESENCE OF COMPUTER GENERATED STRINGS

Pub. No.:    WO/2018/177602    International Application No.:    PCT/EP2018/000152
Publication Date: Fri Oct 05 01:59:59 CEST 2018 International Filing Date: Wed Apr 04 01:59:59 CEST 2018
IPC: H04L 29/06
G06F 21/56
Applicants: AVAST SOFTWARE S.R.O.
Inventors: KONOPISKY, Denis
Title: MALWARE DETECTION IN APPLICATIONS BASED ON PRESENCE OF COMPUTER GENERATED STRINGS
Abstract:
An executable file can be determined to be malicious based, at least in part, on the presence of a computer generated text string as a function name, method name, or variable name. The attributes of the function names, method names, and variable names in an executable file can be determined. The attributes can include the ratio of consonants to vowels for at least one text string in the executable file. The attributes may also include the number of consonants in a sequence uninterrupted by a vowel for at least one text string in the executable file. If the attributes indicate that a function name, method name or variable name has been computer generated, the executable file can be labeled as potentially malicious.