Detecting attacks disguised by evasion techniques is a challenge for signature-based
Intrusion Detection Systems (IDSs) and Intrusion Prevention Systems (IPSs). This study …

Zero-day polymorphic worms pose a serious threat to the Internet security. With their ability
to rapidly propagate, these worms increasingly threaten the Internet hosts and services. Not …

Recent works have shown promise in detecting malware programs based on their dynamic
microarchitectural execution patterns. Compared to higher-level features like OS and …

JavaScript malware-based attacks account for a large fraction of successful mass-scale
exploitation happening today. Attackers like JavaScript-based attacks because they can be …

Abstract Return-Oriented Programming (ROP) is a new technique that helps the attacker
construct malicious code mounted on x86/SPARC executables without any function call at …

Heap spraying is a security attack that increases the exploitability of memory corruption
errors in type-unsafe applications. In a heap-spraying attack, an attacker coerces an …

The advent of Web 2.0 has lead to the proliferation of client-side code that is typically written
in JavaScript. This code is often combined—or mashed-up—with other code and content …

Drive-by download attacks are among the most common methods for spreading malware
today. These attacks typically exploit memory corruption vulnerabilities in web browsers and …

US PATENT DOCUMENTS 7,526,758 B2 4/2009 Hasse et al. 7,639,714 B2 12/2009 Stolfo
et al. 7,818,781 B2 10/2010 Golan et al. 7,975,059 B2 7/2011 Wang et al. 8,074,115 B2 …

Disclosed are devices, systems, apparatus, methods, products, media and other
implementations, including a method that includes obtaining current hardware performance …