Patent ID: 9047293
Filing Date: 2015-06-02
Classification: G06F

Abstract:
1. A non-transitory computer readable medium comprising instructions that, when executed by a processor, cause the processor to perform operations comprising: receiving a first file in a computer, wherein the first file comprises one or more file fields, each file field comprising a field length; determining that the first file is in a first format of a plurality of file formats, wherein each format of the plurality of file formats has valid values comprising expected legitimate field lengths and allowed field values for files in the respective format; extracting the one or more file fields from the first file; finding whether the one or more file fields from the first file have invalid values in comparison to the first format, the finding comprising: in response to finding that the one or more file fields from the first file has invalid values: indicating a presence of malicious code in the first file when the converting the first file to a second file of the second format fails, the indicating comprising at least one out of: in response to successfully converting the first file to a second file of the second format: