John L Everett

US Patent:

20140059684, Feb 27, 2014

Filed:

Aug 23, 2012

Appl. No.:

13/592596

Inventors:

Daniel Wyschogrod - Newton MA, US
Steven W. Jilcott - Foxboro MA, US
Jonathan Aron Rubin - Bedford MA, US
John O. Everett - Great Falls VA, US

Assignee:

Raytheon BBN Technologies Corp. - Cambridge MA

International Classification:

G06F 21/00

US Classification:

726 23

Abstract:

Embodiments of a system and method for computer inspection of information objects, for example, executable software applications for common components that may include elements of computer viruses, items from hacker exploit libraries, or other malware components. Information objects may contain identified sequences of instructions, each of which may be identified and hierarchically grouped based on their structural relationship(s). In the software context, programming languages may include multiple components that include functional code; these components are often shared between programmers. In some embodiments, an inspection of the hierarchical relationship of components (e.g., constituent functions) in the information objects may allow for identification of common components shared between programs. In some embodiments, authorship of objects or components in the objects may be identified by comparisons between component samples. In some embodiments, inspection of the relationship between components is limited to component groups having a specified structural size, complexity, or eccentricity.