Patent ID: 9542535
Date: 2017-01-10
CPC Classifications: G06F

Claim:
1. A computer-implemented method for recognizing behavioral attributes of software in real-time, comprising: executing an executable file; tracing one or more non-sequential runtime events and a set of inter-related dynamic characteristics associated with the one or more non-sequential runtime events, the set of inter-related dynamic characteristics being associated with a behavior of the executable file, the one or more runtime events comprising a function call and abstract data types; translating the one or more non-sequential traced runtime events and the set of inter-related dynamic characteristics from machine code to a high level language, the high level language comprising one or more labels written in human-readable text to describe the one or more traced non-sequential runtime events and the set of inter-related dynamic characteristics; and producing a recognizable pattern of the translated traced non-sequential runtime events based at least in part on the set of inter-related dynamic characteristics, wherein the pattern comprises a unique behavioral set of the translated traced runtime events.