09189627 is referenced by 46 patents and cites 344 patents.

According to one embodiment, a computerized method comprises receiving an encrypted object and conducting a first static scanning operation on the encrypted object to decrypt the encrypted object in real-time. Thereafter, a second static scanning operation is conducted on the decrypted object to determine whether the decrypted object is suspected of including malware. Based on the results of the second static scanning operation, the decrypted object may be classified to identify a suspected presence of malware.

Title
System, apparatus and method for conducting on-the-fly decryption of encrypted objects for malware detection
Application Number
14/86842
Publication Number
9189627 (B1)
Application Date
November 21, 2013
Publication Date
November 17, 2015
Inventor
Ali Islam
Union City
CA, US
Agent
William W Schaal
Rutan & Tucker
Assignee
FireEye
CA, US
IPC
G06F 21/56
H04L 9/08
View Original Source