System und Verfahren zur Automatischen Neutralisierung von Malware

Details

Veröffentlichungs-Nr.

EP4009586

Aktenzeichen

EP21212905

Anmeldetag

7. Dezember 2021

Veröffentlichung

5. Juni 2024

Erteilung

5. Juni 2024

Rechtsraum

EP

IPC

H04L9/40

Abstract

A system for automated neutralization of fileless malware on connected IoT devices, each having a memory, for storing the device's operation software, a processor for sending commands to the device's components and a network card, for connects the device's processor to a data network. The system comprises a Feature Extractor module for receiving, collecting and analyzing data from the device's memory, the processor and the network card, and for recording measurements from the device and extracting the device's behavioral pattern; an Intrusion Detector, for examining the behavioral pattern received from the Feature Extractor and deciding whether there was a malware break/attack or there is a malfunction of the device itself; a Remediation Selector, that learns in real-time how different pre-defined actions affect the monitored devices for receiving from the Intrusion Detector decision if the is device under a malware attack and its kind, and sending remediation, repairing and neutralization commands to an LSTM Neural Network.

Anmelder

Firma

Deutsche Telekom AG

Land

🇩🇪 Deutschland

Fachgebiete