RANSOMWARE PROTECTION IN ADVANCED INJECTION-BASED ATTACKS

Abstract: systems and methods for ransomware protection in advanced injection-based attacks. the call stack(s) of injected threads are analyzed and a preliminary verdict of benign or malicious can be determined. additional sensors collect data to associate injected threads with other activities or actors to further estimate the injected thread being benign or malicious. if the threat level is high enough, such as over a given threshold, the preliminary verdict can be determined to be malicious. subsequently, one or more virtual honeypots are generated for the suspicious threads and the injected thread's response to the virtual honeypots included in anti-ransomware heuristic analysis.

Inventor(s): Vladimir Strogov, Aliaksei Dodz, Serg Bell, Stanislav Protasov

CPC Classification: H04L63/1491 ({for detecting or protecting against malicious traffic})

Search for rejections for patent application number 20250175498