System and Method to Extract and Utilize Disassembly Features to Classify Software Intent

摘要

A system and method operable to identify malicious software by extracting one or more features disassembled from software suspected to be malicious software and employing one or more of those features in a machine-learning algorithm to classify such software.

主权项

1. A method to extract and utilize disassembly features to classify an intent of a software program, the method comprising the steps of:
disassembling, at least partially, a software program; extracting at least one feature from the at least partially disassembled software program; processing the at least one feature using an algorithm; and classifying the software program based on a result yielded from processing the at least one feature using the algorithm.