Invention Grant
- Patent Title: Selecting malware signatures to reduce false-positive detections
- Patent Title (中): 选择恶意软件签名以减少假阳性检测
-
Application No.: US12340420Application Date: 2008-12-19
-
Publication No.: US08239948B1Publication Date: 2012-08-07
- Inventor: Kent E. Griffin , Tzi-cker Chiueh , Scott Schneider , Xin Hu
- Applicant: Kent E. Griffin , Tzi-cker Chiueh , Scott Schneider , Xin Hu
- Applicant Address: US CA Mountain View
- Assignee: Symantec Corporation
- Current Assignee: Symantec Corporation
- Current Assignee Address: US CA Mountain View
- Agency: Fenwick & West LLP
- Main IPC: G06F11/00
- IPC: G06F11/00

Abstract:
A set of candidate signatures for a malicious software (malware) is generated. The candidate signatures in the set are scored based on features that indicate the signatures are more unique and thus less likely to generically occur non-malicious programs. A malware signature for the malware entity is selected from among the candidate malware signatures based on the scores. The selected malware signature is stored.
Information query