Patent ID: 11954202
Assignee: CAPITAL ONE SERVICES, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 11:
12. A method detecting obfuscated shell scripts, comprising:
receiving, by a system, a shell script associated with a computing device;
generating, by the system, a character frequency feature vector based on the shell script;
inputting, by the system, text of the shell script to a convolutional neural network (CNN) branch of a trained deep learning model that includes the CNN branch and a feedforward neural network branch;
inputting, by the system, the character frequency feature vector to the feedforward neural network branch of the trained deep learning model;
determining, by the system, using the trained deep learning model, a respective probability score for each of a plurality of obfuscation types for the shell script based on a combined output of the CNN branch and the feedforward neural network branch; and
detecting, by the system, whether the shell script is obfuscated based on the respective probability score for each of the plurality of obfuscation types determined for the shell script.