View source for 18385591. COMMAND LINE OBFUSCATION DETECTION TECHNIQUES (Cisco Technology, Inc.)

<!-- JSON-LD markup for search engines:
{"@context":"https://schema.org","@type":"TechArticle","headline":"COMMAND LINE OBFUSCATION DETECTION TECHNIQUES","name":"COMMAND LINE OBFUSCATION DETECTION TECHNIQUES","description":"Techniques described herein can perform obfuscation detection on command lines used at computing devices in a network. In response to detecting obfuscation in a command line, the disclosed techniques ...","datePublished":"2023-10-31","mainEntity":{"@type":"Patent","identifier":"18385591","name":"COMMAND LINE OBFUSCATION DETECTION TECHNIQUES","abstract":"Techniques described herein can perform obfuscation detection on command lines used at computing devices in a network. In response to detecting obfuscation in a command line, the disclosed techniques can output a notification for use in connection with network security analysis. The command line obfuscation detection techniques include pre-processing command line input data and converting command lines into token groups. The token groups are then provided as an input to a natural language processor or other machine learned model, which is trained to identify obfuscation probabilities associated with token groups can corresponding command lines. A notification is generated to trigger further analysis in response to an obfuscation probability exceeding a threshold obfuscation probability.","applicationNumber":"18385591","datePublished":"2023-10-31","inventor":[{"@type":"Person","name":"Michael Adam Polak"},{"@type":"Person","name":"Martin Kopp"},{"@type":"Person","name":"Vojtech Outrata"}],"applicant":{"@type":"Organization","name":"Cisco Technology, Inc."},"additionalProperty":[{"@type":"PropertyValue","name":"IPC Classification","value":"H04L9/40"},{"@type":"PropertyValue","name":"IPC Classification","value":"G06N20/00"},{"@type":"PropertyValue","name":"CPC Classification","value":"H04L63/1425"}]}}
-->

=COMMAND LINE OBFUSCATION DETECTION TECHNIQUES=


==Organization Name==

[[:Category:Cisco Technology, Inc.|Cisco Technology, Inc.]]


[[Category:Cisco Technology, Inc.]]

==Inventor(s)==

[[:Category:Michael Adam Polak of Praha CZ|Michael Adam Polak of Praha CZ]][[Category:Michael Adam Polak of Praha CZ]]

[[:Category:Martin Kopp of Komarov CZ|Martin Kopp of Komarov CZ]][[Category:Martin Kopp of Komarov CZ]]

[[:Category:Vojtech Outrata of Knezmost CZ|Vojtech Outrata of Knezmost CZ]][[Category:Vojtech Outrata of Knezmost CZ]]

==COMMAND LINE OBFUSCATION DETECTION TECHNIQUES==


This abstract first appeared for US patent application 18385591 titled 'COMMAND LINE OBFUSCATION DETECTION TECHNIQUES

==Original Abstract Submitted==

Techniques described herein can perform obfuscation detection on command lines used at computing devices in a network. In response to detecting obfuscation in a command line, the disclosed techniques can output a notification for use in connection with network security analysis. The command line obfuscation detection techniques include pre-processing command line input data and converting command lines into token groups. The token groups are then provided as an input to a natural language processor or other machine learned model, which is trained to identify obfuscation probabilities associated with token groups can corresponding command lines. A notification is generated to trigger further analysis in response to an obfuscation probability exceeding a threshold obfuscation probability.



[[Category:H04L9/40]]
[[Category:G06N20/00]]
[[Category:CPC_H04L63/1425]]