Solidifying Malware Identification

Solidcore¿s approach to malware-ID is to decouple packet payload analysis from the capture of packets in transit and the resulting necessity of (a) network-speed analysis, (b) analysis of large numbers of packets, only a minority of which contain malicious payloads. Phase I activities will consist of extending Solidcore¿s existing technology so that it can perform both of: ¿ malware identification (malware-ID) for new and unknown attacks as well as known attacks, and ¿ real-time generation and dissemination of attack identification data for existing security mechanisms.