公开(公告)号：US12099599B2

公开(公告)日：2024-09-24

申请号：US17538703

申请日：2021-11-30

Applicant: Huawei Technologies Co., Ltd.

Inventor： Moez Draief ,  Xiang Chen ,  Konstantin Kutzkov ,  Kevin Scaman ,  Milan Vojnovic

IPC: G06F11/00 ,  G06F12/14 ,  G06F12/16 ,  G06F21/55 ,  G06N3/044 ,  G08B23/00

CPC classification number: G06F21/552 ,  G06N3/044 ,  G06F2221/033

Abstract: Apparatuses and methods for determining if a computer program is malware and to which malware class it belongs to. In the method, the behaviour of a computer program is traced by observing the activity of the program. Behaviour sequences comprising API-calls or similar activity of a computer program are then provided into a classifier for classifying the computer program. From the outcome of the classifier, a classification result and the portions relevant to decision can be provided to a person for further confirmation.