公开(公告)号：US11297096B2

公开(公告)日：2022-04-05

申请号：US16584552

申请日：2019-09-26

Applicant: Avast Software s.r.o.

Inventor： Petr Gronát ,  Mikulá{hacek over (s)} Zelinka

IPC: H04L29/06 ,  G06N3/08 ,  G06K9/62

Abstract: A method of identifying malicious activity in a computer data sequence includes providing provided the computer data sequence to a network configured to convert the computer data sequence from a high-dimensional space to a low-dimensional space, and processing the computer data sequence in the low-dimensional space to generate an approximately Gaussian distribution. The processed computer data sequence converted to the low dimensional space is evaluated relative to the approximately Gaussian distribution to determine whether the computer data sequence is likely malicious or likely benign, and an output is provided indicating whether the computer data sequence is likely malicious or likely benign.

公开(公告)号：US20190325134A1

公开(公告)日：2019-10-24

申请号：US16389710

申请日：2019-04-19

Applicant: Avast Software s.r.o.

Inventor： Petr Gronát

IPC: G06F21/56 ,  G06N3/08

Abstract: A method of identifying malicious activity in a sequence of computer instructions includes providing the sequence of computer instructions into a recurrent neural network configured to provide an output based on both the current instruction being input and at least one prior instruction in the sequence, and evaluating the provided sequence of computer instructions in the recurrent neural network at multiple points within the sequence. An output is provided indicating whether the network has determined the code sequence to that point is likely malicious.

公开(公告)号：US11586881B2

公开(公告)日：2023-02-21

申请号：US16799738

申请日：2020-02-24

Applicant: Avast Software s.r.o.

Inventor： Petr Gronát ,  Petr Kaderábek ,  Jakub Sanojca

IPC: H04L9/40 ,  G06N3/049 ,  G06N3/08 ,  G06K9/62

Abstract: A method of generating receiving a valid domain name comprises evaluating a received valid domain name in a neural network trained to generate similar domain names, and providing an output comprising at least one domain name similar to the received valid domain name generated by the neural network. In a further example, a recurrent neural network is trained using valid domain names and observed malicious similar domain names and/or linguistic rules. In another example, the output of the recurrent neural network further comprises a similarity score reflecting a degree of similarity between the valid domain name and the similar domain name, such that the similarity score can be used to generate a ranked list of domain names similar to the valid domain name.

公开(公告)号：US20210264233A1

公开(公告)日：2021-08-26

申请号：US16799738

申请日：2020-02-24

Applicant: Avast Software s.r.o.

Inventor： Petr Gronát ,  Petr Kaderábek ,  Jakub Sanojca

IPC: G06N3/04 ,  G06N3/08 ,  G06K9/62 ,  H04L29/06

Abstract: A method of generating receiving a valid domain name comprises evaluating a received valid domain name in a neural network trained to generate similar domain names, and providing an output comprising at least one domain name similar to the received valid domain name generated by the neural network. In a further example, a recurrent neural network is trained using valid domain names and observed malicious similar domain names and/or linguistic rules. In another example, the output of the recurrent neural network further comprises a similarity score reflecting a degree of similarity between the valid domain name and the similar domain name, such that the similarity score can be used to generate a ranked list of domain names similar to the valid domain name.