Digital DNA sequence

• US 8,769,689 B2
• Filed: 04/24/2009
• Issued: 07/01/2014
• Est. Priority Date: 04/24/2009
• Status: Active Grant

• Current Assignee: GoSecure, Inc.
• Original Assignee: HBGary, Inc. (Mantech International Corporation)
• Inventors: Hoglund, Michael Gregory
• Primary Examiner(s): Pwu, Jeffrey
• Assistant Examiner(s): Salehi, Helai
• Application Number:
  US12/386,970
• Publication Number:
  US 20110067108A1
• Time in Patent Office: 1,894 Days
• Field of Search: 726 22- 25, 713/200
• US Class Current: 726/24
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/564 by virus signature recognition
• CPC Class Codes: G06N 5/027 Frames

Abstract

In an embodiment of the invention, a method of classifying a data object includes: scanning the data object; evaluating contents of data objects base on at least one selected rule; and generating a digital DNA sequence that classifies at least some contents in the data object.

Claims

1. A computer-implemented method of classifying a data object, comprising:

scanning the data object with a processor;

evaluating contents of the data object based on at least one selected rule;

generating a sequence that classifies at least some contents of the data object, and

storing the sequence as a single digital file in a selected target memory,

further comprising a discrete weight decay algorithm comprising;

assigning a given weight value for a rule; and

if additional values are received for the given weight value for the rule, then permitting those additional values to have a progressively lesser effect on a summed weight value.

2. The method of claim 1, wherein the sequence comprises at least one expressed trait with reference to the data object.

3. The method of claim 1, wherein the sequence comprises a rule type.

4. The method of claim 1, wherein the sequence comprises a rule body.

5. The method of claim 1, wherein the sequence comprises a rule restrictor.

6. The method of claim 1, wherein the sequence comprises the rule restrictor includes an extended qualifier.

7. The method of claim 1, wherein a rule can be written in longhand form.

8. The method of claim 1, wherein a rule can be written with wildcard characters.

9. The method of claim 2, wherein the expressed trait comprises a rule.

10. The method of claim 2, wherein the expressed trait comprises a weight.

11. The method of claim 2, wherein the expressed trait comprises a trait code.

12. The method of claim 2, wherein the expressed trait comprises a description.

13. The method of claim 2, wherein the expressed trait comprises a control code that sets an expression mode or a match definition mode.

14. An apparatus for classifying a data object, comprising:

a processor; and

a sequencing engine that is executable by the processor, wherein the sequencing engine scans the data object, evaluates contents of the data object based on at least one selected rule, generates a sequence that classifies at least some contents of the data object, and stores the sequence as a single digital file in a selected target memory,

wherein the sequencing engine further performs a discrete weight decay algorithm that assigns a given weight value for a rule and permits additional values to have a progressively lesser effect on a summed weight value if those additional values are received for a given weight value for the rule.

15. The apparatus of claim 14, wherein the sequence comprises at least one expressed trait with reference to the data object.

16. The apparatus of claim 14, wherein the sequence comprises a rule type.

17. The apparatus of claim 14, wherein the sequence comprises a rule body.

18. The apparatus of claim 14, wherein the sequence comprises a rule restrictor.

19. The apparatus of claim 14, wherein the sequence comprises the rule restrictor includes an extended qualifier.

20. The apparatus of claim 14, wherein a rule can be written in longhand form.

21. The apparatus of claim 14, wherein a rule can be written with wildcard characters.

22. The apparatus of claim 15, wherein the expressed trait comprises a rule.

23. The apparatus of claim 15, wherein the expressed trait comprises a weight.

24. The apparatus of claim 15, wherein the expressed trait comprises a trait code.

25. The apparatus of claim 15, wherein the expressed trait comprises a description.

26. The apparatus of claim 15, wherein the expressed trait comprises a control code that sets an expression mode or a match definition mode.

27. An apparatus for classifying a data object, configured to implement the following steps:

scanning the data object using a processor;

evaluating contents of the data object based on at least one selected rule;

generating a sequence that classifies at least some contents of the data object; and

storing the sequence as a single digital file in a selected target memory,

further comprising a discrete weight decay algorithm comprising;

assigning a given weight value for a rule; and

if additional values are received for the given weight value for the rule, then permitting those additional values to have a progressively lesser effect on a summed weight value.

28. An article of manufacture comprising:

a machine-readable medium having stored thereon instructions to;

scan a data object;

evaluate contents of the data object based on at least one selected rule;

generate a sequence that classifies at least some contents of the data object; and

storing the sequence as a single digital file in a selected target memory,

further comprising a discrete weight decay algorithm comprising;

assigning a given weight value for a rule; and

if additional values are received for the given weight value for the rule, then permitting those additional values to have a progressively lesser effect on a summed weight value.