Activity trace extraction device, activity trace extraction method, and activity trace extraction program

JP7616349B2Active Publication Date: 2025-01-17NIPPON TELEGRAPH & TELEPHONE CORP
View PDF 3 Cites 0 Cited by

Patent Information

Application Number
JP2023506450
Authority / Receiving Office
JP · JP
Patent Type
Patents
Current Assignee / Owner
Filing Date
2021-03-16
Publication Date
2025-01-17
Estimated Expiration
2041-03-16

Smart Images

  • Figure 0007616349000001
    Figure 0007616349000001
  • Figure 0007616349000002
    Figure 0007616349000002
  • Figure 0007616349000003
    Figure 0007616349000003
Patent Text Reader

Abstract

This activity trace extraction device (100) executes malware so as to collect analysis logs that include a plurality of activity traces of the malware, and reexecutes the malware in an environment that indicates time information that is different from time information in which the malware was executed so as to collect time change analysis logs that include a plurality of activity traces of the malware. On the basis of the analysis logs and the time change analysis logs, the activity trace extraction device (100) removes, from the analysis logs, an activity trace among the plurality of activity traces included in the analysis logs that is different from activity traces of the time change analysis logs, so as to update the analysis logs. The activity trace extraction device (100) generates, on the basis of the updated analysis logs, the trace information of the malware that is independent of the elapse of time.
Need to check novelty before this filing date? Find Prior Art

Citation Information

Patent Citations

  • Information processor, information processing system, program, and recording medium

    JP2010009187A

  • Method for identifying malicious executable

    JP2014038596A

  • Detecting zero-day attacks with unknown signatures via mining correlation in behavioral change of entities over time

    WO2020005250A1