Ransomware-Verhaltenskernmodell

Details

Veröffentlichungs-Nr.

EP4811193

Anmeldetag

17. März 2026

Veröffentlichung

23. September 2026

Rechtsraum

EP

Abstract

Time series behavioral data derived from operating system events on a monitored computing device is monitored at a kernel level. Based on this monitoring, a feature vector is populated or updated with features indicative of ransomware. These features are extracted or otherwise derived from the time series behavioral data. The feature vector can be input into a machine learning model (e.g., a modified gated recurrent unit, etc.) to characterize whether the time series behavioral data is indicative of a ransomware event. Data indicating a probability of a ransomware event occurring is provided to a consuming application or process. One or more remediation actions to thwart the ransomware event can be initiated when the probability level is above a threshold.

Anmelder

Firma

Halcyon Tech, Inc.

Land

🇺🇸 USA