Invention Grant
- Patent Title: Detecting malicious code based on conditional branch asymmetry
-
Application No.: US14973358Application Date: 2015-12-17
-
Publication No.: US10657255B2Publication Date: 2020-05-19
- Inventor: Roee Hay , Sagi Kedmi , Omer Tripp
- Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION
- Applicant Address: US NY Armonk
- Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
- Current Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
- Current Assignee Address: US NY Armonk
- Agency: Tutunjian & Bitetto, P.C.
- Agent Jeffrey S. LaBaw
- Main IPC: G06F21/56
- IPC: G06F21/56 ; G06F21/55

Abstract:
A computer-implemented method for detecting malware based on asymmetry includes receiving, via a processor, an application to be tested. The method includes computing, via the processor, a static call graph for the application. The method also includes generating, via the processor, an interprocedural control-flow graph (ICFG) based on the static call graph. The method further includes detecting, via the processor, symbolic path conditions and executable operations along different paths of conditional branches in the ICFG. The method further includes detecting, via the processor, asymmetries based on the symbolic path conditions and the executable operations. The method includes detecting, via the processor, a malicious block based on the detected asymmetries. The method further includes modifying, via the processor, the application based on the detected malicious block.
Public/Granted literature
- US20170177868A1 DETECTING MALICIOUS CODE BASED ON CONDITIONAL BRANCH ASYMMETRY Public/Granted day:2017-06-22
Information query