Michael William Weber

US Patent:

7644441, Jan 5, 2010

Filed:

Sep 24, 2004

Appl. No.:

10/948147

Inventors:

Matthew N. Schmid - Reston VA, US
Michael Weber - Brookline MA, US
Michael Haddox-Schatz - Newport News VA, US
David Geyer - Sterling VA, US

Assignee:

Cigital, Inc. - Dulles VA

International Classification:

G08B 23/00
G06F 11/30
G06F 12/14

US Classification:

726 24, 713188, 714 38

Abstract:

Malicious software is identified in an executable file by identifying malicious structural features, decryption code, and cryptographic functions. A malicious structural feature is identified by comparing a known malicious structural feature to one or more instructions of the executable file. A malicious structural feature is also identified by graphically and statistically comparing windows of bytes or instructions in a section of the executable file. Cryptography is an indicator of malicious software. Decryption code is identified in an executable file by identifying a tight loop around a reversible instruction that writes to random access memory. Cryptographic functions are identified in an executable file be obtaining a known cryptographic function and performing a string comparison of the numeric constants of the known cryptographic function with the executable file.

US Patent:

7911962, Mar 22, 2011

Filed:

Apr 15, 2008

Appl. No.:

12/103268

Inventors:

Phong C. Khuu - Ashburn VA, US
Michael J. Weber - Warrenton VA, US
Gregory S. Sadosuk - Fairfax VA, US
Brian D. Loop - Fairfax VA, US
John Gu - Rockaway NJ, US
Reza Ghanadan - Berkeley Heights NJ, US
Jessica Hsu - Clifton NJ, US

Assignee:

BAE Systems Information and Electronic Systems Integration Inc. - Nashua NH

International Classification:

G01R 31/08

US Classification:

370238

Abstract:

A method and apparatus is provided for using a distributed multi-path QoS-aware routing scheme that considers basic MANET characteristics to meet transport service requirements of real-time applications and makes use of multiple discovered paths to calculate a next-hop decision. The QoS Routing scheme superimposes distributed neighborhood congestion, neighborhood density, and link stability and delay information over the multiple discovered paths when the next-hop decision is calculated.

US Patent:

20180068121, Mar 8, 2018

Filed:

Sep 2, 2016

Appl. No.:

15/255452

Inventors:

- Nashua NH, US
Vu T. Le - Chantilly VA, US
Robert B. Ross - Fairfax VA, US
Gregory S. Sadosuk - Fairfax VA, US
Michael J. Weber - Warrenton VA, US

International Classification:

G06F 21/56
G06F 11/36
G06F 9/45

Abstract:

A Taint Modeling Function (TMF) finds abstract patterns and uses them to automate the malware detection process. TMF involves the process of statically analyzing a sequence of assembly language instructions and abstracting complex relationships among instruction inputs and outputs into a mathematical function containing a set of algebraic expressions. The set of expressions support fully automating semantic pattern detection in binary code. It deterministically generates outputs given inputs determining code block outputs, for given inputs, without executing the code. It detects code patterns automatically to spot bad coding patterns directly from the binary used to detect bugs statically in the entire application space.