Patent ID: 9021589
Filing Date: 2015-04-28
Classification: G06F

Abstract:
1. A method of automated classification of at least one program as malware or non-malware, implemented at least in part by one or more computing devices, the method comprising: generating, by the one or more computing devices, at least one graph representation of at least one dynamic data source of the at least one program; generating at least one graph representation of at least one static data source of the at least one program; and at least using the at least one graph representation of the at least one dynamic data source and the at least one graph representation of the at least one static data source, classifying the at least one program as malware or non-malware, wherein the classifying comprises using a kernel-based classification algorithm and combining the at least one graph representation of the at least one dynamic data source and the at least one graph representation of the at least one static data source via multiple kernel learning.