IL259878B - Systems and methods for detecting malicious code in generated code in real time - Google Patents

Systems and methods for detecting malicious code in generated code in real time

Info

Publication number
IL259878B
IL259878B IL259878A IL25987818A IL259878B IL 259878 B IL259878 B IL 259878B IL 259878 A IL259878 A IL 259878A IL 25987818 A IL25987818 A IL 25987818A IL 259878 B IL259878 B IL 259878B
Authority
IL
Israel
Prior art keywords
code
systems
detection
methods
runtime generated
Prior art date
Application number
IL259878A
Other languages
English (en)
Hebrew (he)
Other versions
IL259878A (en
Inventor
Yavo Udi
Original Assignee
Ensilo Ltd
Fortinet Inc
Yavo Udi
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ensilo Ltd, Fortinet Inc, Yavo Udi filed Critical Ensilo Ltd
Publication of IL259878A publication Critical patent/IL259878A/en
Publication of IL259878B publication Critical patent/IL259878B/en

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
    • G06F21/566—Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Health & Medical Sciences (AREA)
  • Virology (AREA)
  • General Health & Medical Sciences (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Stored Programmes (AREA)
  • Debugging And Monitoring (AREA)
  • Storage Device Security (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
IL259878A 2015-12-08 2018-06-07 Systems and methods for detecting malicious code in generated code in real time IL259878B (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US201562264404P 2015-12-08 2015-12-08
PCT/IL2016/050987 WO2017098495A1 (en) 2015-12-08 2016-09-07 Systems and methods for detection of malicious code in runtime generated code

Publications (2)

Publication Number Publication Date
IL259878A IL259878A (en) 2018-07-31
IL259878B true IL259878B (en) 2021-07-29

Family

ID=57113519

Family Applications (1)

Application Number Title Priority Date Filing Date
IL259878A IL259878B (en) 2015-12-08 2018-06-07 Systems and methods for detecting malicious code in generated code in real time

Country Status (8)

Country Link
US (1) US20170161498A1 (enExample)
EP (1) EP3387579A1 (enExample)
JP (1) JP6837064B2 (enExample)
CA (1) CA3005314A1 (enExample)
IL (1) IL259878B (enExample)
SG (1) SG11201804085SA (enExample)
TW (1) TWI791418B (enExample)
WO (1) WO2017098495A1 (enExample)

Families Citing this family (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9916448B1 (en) * 2016-01-21 2018-03-13 Trend Micro Incorporated Detection of malicious mobile apps
US10275595B2 (en) * 2016-09-29 2019-04-30 Trap Data Security Ltd. System and method for characterizing malware
TWI668592B (zh) * 2017-07-28 2019-08-11 中華電信股份有限公司 Method for automatically determining the malicious degree of Android App by using multiple dimensions
US10977368B1 (en) * 2017-12-27 2021-04-13 Ca Technologies, Inc. Detecting malware based on memory allocation patterns
US11238017B2 (en) * 2018-01-30 2022-02-01 Salesforce.Com, Inc. Runtime detector for data corruptions
US11609984B2 (en) * 2018-02-14 2023-03-21 Digital Guardian Llc Systems and methods for determining a likelihood of an existence of malware on an executable
US11481376B2 (en) 2018-06-19 2022-10-25 Salesforce, Inc. Platform for handling data corruptions
JP7672041B2 (ja) 2019-06-26 2025-05-07 久利寿 帝都 情報処理方法および情報処理システム
US11681804B2 (en) 2020-03-09 2023-06-20 Commvault Systems, Inc. System and method for automatic generation of malware detection traps
CN112199274B (zh) * 2020-09-18 2022-05-03 北京大学 基于V8引擎的JavaScript动态污点跟踪方法及电子装置
US11709675B2 (en) 2020-10-30 2023-07-25 Apple Inc. Software verification of dynamically generated code
CN112579094B (zh) * 2020-12-15 2024-05-14 上海赛可出行科技服务有限公司 一种基于模板代码匹配的轻量级热修复方法
CN113868655B (zh) * 2021-09-29 2025-07-11 北京天融信网络安全技术有限公司 木马查杀方法、装置、电子设备及计算机可读存储介质
US20230252162A1 (en) * 2022-02-10 2023-08-10 Cisco Technology, Inc. Application Vulnerability Score Based on Stack Traces
US12212585B2 (en) 2022-04-01 2025-01-28 Vectra Ai, Inc. Method, product, and system for analyzing a computer network to identify attack paths using a software representation that embodies network configuration and policy data for security management
US12219070B2 (en) 2022-04-01 2025-02-04 Vectra Ai, Inc. Method, product, and system for generating detection signatures based on attack paths in a computer network identified using a software representation that embodies network configuration and policy data for security management using detection signature templates
US12328322B2 (en) 2022-04-01 2025-06-10 Vectra Ai, Inc. Method, product, and system for network security management using software representation that embodies network configuration and policy data
EP4254866A1 (en) * 2022-04-01 2023-10-04 Vectra AI, Inc. Method, product, and system for generating detection signatures based on attack paths in a computer network identified using a software representation that embodies network configuration and policy data for security management using detection signature templates
US12477001B2 (en) 2022-04-01 2025-11-18 Vectra Ai, Inc. Method, product, and system for analyzing attack paths in computer network generated using a software representation that embodies network configuration and policy data for security management
US20240056481A1 (en) 2022-08-09 2024-02-15 Commvault Systems, Inc. Data storage management system integrating cyber threat deception

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070192863A1 (en) * 2005-07-01 2007-08-16 Harsh Kapoor Systems and methods for processing data flows
US7478431B1 (en) * 2002-08-02 2009-01-13 Symantec Corporation Heuristic detection of computer viruses
GB2396227B (en) * 2002-12-12 2006-02-08 Messagelabs Ltd Method of and system for heuristically detecting viruses in executable code
US7984304B1 (en) * 2004-03-02 2011-07-19 Vmware, Inc. Dynamic verification of validity of executable code
US8176554B1 (en) * 2008-05-30 2012-05-08 Symantec Corporation Malware detection through symbol whitelisting
US20110191848A1 (en) * 2010-02-03 2011-08-04 Microsoft Corporation Preventing malicious just-in-time spraying attacks
KR101122650B1 (ko) * 2010-04-28 2012-03-09 한국전자통신연구원 정상 프로세스에 위장 삽입된 악성코드 탐지 장치, 시스템 및 방법
US20120331303A1 (en) * 2011-06-23 2012-12-27 Andersson Jonathan E Method and system for preventing execution of malware
CN102819697B (zh) * 2011-12-26 2015-07-22 哈尔滨安天科技股份有限公司 一种基于线程反编译的多平台恶意代码检测方法和系统
TWI528216B (zh) * 2014-04-30 2016-04-01 財團法人資訊工業策進會 隨選檢測惡意程式之方法、電子裝置、及使用者介面

Also Published As

Publication number Publication date
US20170161498A1 (en) 2017-06-08
TW201721497A (zh) 2017-06-16
JP6837064B2 (ja) 2021-03-03
WO2017098495A1 (en) 2017-06-15
TWI791418B (zh) 2023-02-11
EP3387579A1 (en) 2018-10-17
CA3005314A1 (en) 2017-06-15
SG11201804085SA (en) 2018-06-28
JP2019502197A (ja) 2019-01-24
IL259878A (en) 2018-07-31

Similar Documents

Publication Publication Date Title
IL259878B (en) Systems and methods for detecting malicious code in generated code in real time
IL252501B (en) Methods and systems for detecting malicious code
SG11201701020UA (en) Method of malware detection and system thereof
IL257852B (en) Methods and systems for fraud detection and prevention
IL267241A (en) System and methods for identifying ransomware
ZA201707665B (en) Methods and systems for copy number variant detection
PL3357000T3 (pl) Systemy i metody wykrywania raka
SG11201706269QA (en) Methods and systems for order processing
GB201718913D0 (en) Sinkhole detection systems and methods
DK3174976T3 (da) Fremgangsmåder og systemer til forarbejdning af partikler
GB201516555D0 (en) Event detection and summarisation
GB201701494D0 (en) Roadway-crossing-anomaly detection system and method
GB201613046D0 (en) Method and system for detection of presence in predefined location and delivery thereto
SG11201607650QA (en) Systems and methods for detecting copied computer code using fingerprints
SI3360100T1 (sl) Sistem in postopek za zaznavanje prevare
GB201510957D0 (en) Systems and Methods For Verification And Anomaly Detection
EP3198503A4 (en) Detection and mitigation of malicious invocation of sensitive code
SG11201609822VA (en) Kick detection systems and methods
SG10201406639UA (en) Event Processing Systems and Methods
SG10201403334XA (en) Detection system and method
GB2540880C (en) Improved intrusion detection system and method
SG11201707779XA (en) Systems and methods for detecting copied computer code using fingerprints
EP3195262C0 (en) ARC DETECTION SYSTEM AND METHOD
GB201613808D0 (en) Location detection system and location detection method of location detection system
IL237178A (en) Electromagnetic radiation detection system and method