Skip to Content
Find More Like This
Return to Search

Methods, media, and systems for detecting attack on a digital processing device

United States Patent

9,576,127
February 21, 2017
View the Complete Patent at the US Patent & Trademark Office
Pacific Northwest National Laboratory - Visit the Technology Commercialization Program Website
Methods, media, and systems for detecting attack are provided. In some embodiments, the methods include: comparing at least part of a document to a static detection model; determining whether attacking code is included in the document based on the comparison of the document to the static detection model; executing at least part of the document; determining whether attacking code is included in the document based on the execution of the at least part of the document; and if attacking code is determined to be included in the document based on at least one of the comparison of the document to the static detection model and the execution of the at least part of the document, reporting the presence of an attack. In some embodiments, the methods include: selecting a data segment in at least one portion of an electronic document; determining whether the arbitrarily selected data segment can be altered without causing the electronic document to result in an error when processed by a corresponding program; in response to determining that the arbitrarily selected data segment can be altered, arbitrarily altering the data segment in the at least one portion of the electronic document to produce an altered electronic document; and determining whether the corresponding program produces an error state when the altered electronic document is processed by the corresponding program.
Stolfo; Salvatore J. (Ridgewood, NJ), Li; Wei-Jen (Rego Park, NY), Keromytis; Angelos D. (New York, NY), Androulaki; Elli (New York, NY)
The Trustees of Columbia University in the City of New York (New York, NY)
14/ 336,649
July 21, 2014
STATEMENT REGARDING FEDERALLY SPONSORED RESEARCH OR DEVELOPMENT The invention was made with government support under Grant No. DE-AC05-76RL01830 awarded by Department of Energy (DOE), Grant No. 60NANB1D0127 awarded by the U.S. Department of Homeland Security through the Institute for Information Infrastructure Protection (I3P), and Grant No. W911NF-06-1-0151-49626-CI awarded by the Army Research Office (ARO). The government has certain rights in the invention.