Patent Document ID: 8650644
Application ID: 13338403

Base Claim:
1. A method comprising: receiving, by a computing device, compressed data, the compressed data including a sequence of references, and a particular reference, of the sequence of references, corresponding to a dictionary word used to obtain the compressed data; obtaining, by the computing device, dictionary words used to obtain the compressed data, the dictionary words including the dictionary word; identifying, by the computing device, one or more of the dictionary words that correspond to malicious content; identifying, by the computing device, the malicious content corresponding to the compressed data based on the one or more of the dictionary words being part of the dictionary words used to obtain the compressed data; and producing, by the computing device, a notification of the malicious content corresponding to the compressed data.

---

Claim 6:
6. The method of claim 1 , where identifying the one or more of the dictionary words that correspond to the malicious content, comprises: performing a suffix tree operation resulting in a partial match scenario between a particular dictionary word, of the one or more of the dictionary words, and a suffix tree pattern, the partial match scenario between the particular dictionary word and the suffix tree pattern corresponds to a segment end of the particular dictionary word, storing a data segment corresponding to the partial match scenario between the particular dictionary word and the suffix tree pattern, performing a pattern matching operation resulting in a partial match scenario between the particular dictionary word and a malicious content pattern, storing a match state corresponding to the partial match scenario between the particular dictionary word and the malicious content pattern, combining the data segment with the match state to obtain a combination, determining that the combination corresponds to the malicious content pattern, and identifying the particular word as one of the one or more of the dictionary words that corresponds to the malicious content based on determining that the combination corresponds to the malicious content pattern.