Digital DNA sequence

• US 20110067108A1
• Filed: 04/24/2009
• Published: 03/17/2011
• Est. Priority Date: 04/24/2009
• Status: Active Grant

• Current Assignee: GoSecure, Inc.
• Original Assignee: HBGary, Inc. (Mantech International Corporation)
• Inventors: Hoglund, Michael Gregory
• Granted Patent: US 8,769,689 B2
• Time in Patent Office: Days
• US Class Current: 726/24
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/564 by virus signature recognition
• CPC Class Codes: G06N 5/027 Frames

Abstract

In an embodiment of the invention, a method of classifying a data object includes: scanning the data object; evaluating contents of data objects base on at least one selected rule; and generating a digital DNA sequence that classifies at least some contents in the data object.

Claims

1. A method of classifying a data object, comprising:

scanning the data object;

evaluating contents of data objects base on at least one selected rule; and

generating a digital DNA sequence that classifies at least some contents in the data object.

2. The method of claim 1, wherein the DNA sequence comprises at least one expressed trait with reference to the data object.

3. The method of claim 2, wherein the expressed trait comprises a rule.

4. The method of claim 2, wherein the expressed trait comprises a weight.

5. The method of claim 2, wherein the expressed trait comprises a trait code.

6. The method of claim 2, wherein the expressed trait comprises a description.

7. The method of claim 2, wherein the expressed trait comprises a control code that sets an expression mode or a match definition mode.

8. The method of claim 1, wherein the DNA sequence comprises a rule type.

9. The method of claim 1, wherein the DNA sequence comprises a rule body.

10. The method of claim 1, wherein the DNA sequence comprises a rule restrictor.

11. The method of claim 1, wherein the DNA sequence comprises the rule restrictor includes an extended qualifier.

12. The method of claim 1, further comprising a discrete weight decay algorithm comprising:

assigning a given weight value for a rule; and

if additional values are received for the given weight value for then rule, then permitting those additional values to have a lesser effect on a summed weight value.

13. The method of claim 1, wherein a rule can be written in longhand form.

14. The method of claim 1, wherein a rule can be written with wildcard characters.

15. An apparatus for classifying a data object, comprising:

a processor; and

a sequencing engine that is executable by the processor, wherein the sequencing engine scans the data object, evaluates contents of data objects base on at least one selected rule, and generates a digital DNA sequence that classifies at least some contents in the data object.

16. The apparatus of claim 15, wherein the DNA sequence comprises at least one expressed trait with reference to the data object.

17. The apparatus of claim 16, wherein the expressed trait comprises a rule.

18. The apparatus of claim 16, wherein the expressed trait comprises a weight.

19. The apparatus of claim 16, wherein the expressed trait comprises a trait code.

20. The apparatus of claim 16, wherein the expressed trait comprises a description.

21. The apparatus of claim 16, wherein the expressed trait comprises a control code that sets an expression mode or a match definition mode.

22. The apparatus of claim 15, wherein the DNA sequence comprises a rule type.

23. The apparatus of claim 15, wherein the DNA sequence comprises a rule body.

24. The apparatus of claim 15, wherein the DNA sequence comprises a rule restrictor.

25. The apparatus of claim 15, wherein the DNA sequence comprises the rule restrictor includes an extended qualifier.

26. The apparatus of claim 15, wherein the sequencing engine further performs a discrete weight decay algorithm that assigns a given weight value for a rule and permits additional values to have a lesser effect on a summed weight value if those additional values are received for a given weight value for a rule.

27. The apparatus of claim 15, wherein a rule can be written in longhand form.

28. The apparatus of claim 15, wherein a rule can be written with wildcard characters.

29. An apparatus for classifying a data object, comprising:

means for scanning the data object;

means for evaluating contents of data objects base on at least one selected rule; and

means for generating a digital DNA sequence that classifies at least some contents in the data object.

30. An article of manufacture comprising:

a machine-readable medium having stored thereon instructions to;

scan the data object;

evaluate contents of data objects base on at least one selected rule; and

generate a digital DNA sequence that classifies at least some contents in the data object.