Patent ID: 11954202
Assignee: CAPITAL ONE SERVICES, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 16:
17. A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:
one or more instructions that, when executed by one or more processors of a system, cause the system to:
receive a shell script associated with a computing device;
generate a character frequency feature vector based on the shell script;
input, into a trained deep learning model that includes a convolutional neural network (CNN) branch and a feedforward neural network branch:
text of the shell script to the CNN branch, and
the character frequency feature vector to the feedforward neural network branch;

determine, using the trained deep learning model, a respective probability score for each of a plurality of obfuscation types for the shell script based on a combined output of the CNN branch and the feedforward neural network branch; and
detect whether the shell script is malicious based on the respective probability score for each of the plurality of obfuscation types determined for the shell script.