Granted Patent B2

US 12,443,714 · App. 18/324,957 · Granted Oct 14, 2025

Inventor: Garrett Thomas Oetken (Post Falls, ID)

Assignee: Quantum Star Technologies Inc.

G06F21/567G06F16/212G06F21/565G06N3/08H04L63/1425G06F2221/034

Abstract

Claims (62)

1. A system comprising:

control circuitry; and

memory communicatively coupled to the control circuitry and storing executable instructions that, when executed by the control circuitry, cause the control circuitry to perform operations comprising:

obtaining data;

mapping at least a portion of the data to an n-dimensional space to form an n-dimensional representation, the mapping including:

determining a first coordinate for a first point based at least in part on a first set of bits in the data and determining a second coordinate for the first point based at least in part on a second set of bits in the data that is adjacent to the first set of bits;

determining a first coordinate for a second point based at least in part on a third set of bits in the data and determining a second coordinate for the second point based at least in part on a fourth set of bits in the data that is adjacent to the third set of bits;

providing the n-dimensional representation as input to an Artificial Intelligence (AI) model that is configured to detect malware; and

generating an indication of whether the data includes malware based on an output from the AI model.

2. The system of claim 1 , wherein the first set of bits comprises a first byte and the second set of bits comprises a second byte that is directly adjacent to the first byte.

3. The system of claim 1 , wherein obtaining the data comprises retrieving data from a data store, the data comprising file system data.

4. The system of claim 1 , wherein the operations further comprise:

extracting a first portion of the data and refraining from extracting a second portion of the data, the first portion of the data including the first set of bits and the second set of bits.

5. The system of claim 1 , wherein the operations further comprise:

determining a type of the data; and

determining to represent the data with a first portion of the data based at least in part on the type of the data, the first portion of the data including the first set of bits and the second set of bits.

6. The system of claim 5 , wherein the first portion of the data includes at least one of a header, a body, or a footer.

7. The system of claim 1 , wherein the operations further comprise:

determining a type of the data; and

determining to represent the data with a first portion of the data and a second portion of the data based at least in part on the type of the data, the first portion of the data including the first set of bits and the second set of bits.

8. The system of claim 1 , wherein the operations further comprise:

training a model to create the AI model, the training being based at least in part on one or more n-dimensional representations that are tagged as being associated with malware and one or more n-dimensional representations that are tagged as being malware free.

9. A system comprising:

control circuitry; and

memory communicatively coupled to the control circuitry and storing executable instructions that, when executed by the control circuitry, cause the control circuitry to perform operations comprising:

receiving data;

selecting a first set of bits in the data;

determining a first coordinate for a first point based at least in part on the first set of bits;

selecting a second set of bits in the data;

determining a second coordinate for the first point based at least in part on the second set of bits;

selecting a third set of bits in the data;

determining a first coordinate for a second point based at least in part on the third set of bits;

selecting a fourth set of bits in the data;

determining a second coordinate for the second point based at least in part on the fourth set of bits, each of the first set of bits, second set of bits, third set of bits, and fourth set of bits including a predetermined number of bits;

mapping the first point and the second point to an n-dimensional space to generate an n-dimensional representation for the data; and

causing the n-dimensional representation to be processed with an Artificial Intelligence (AI) model that is configured to detect malware.

10. The system of claim 9 , wherein the first set of bits comprises a first byte and the second set of bits comprises a second byte.

11. The system of claim 10 , wherein the first and second bytes are directly adjacent to each other.

12. The system of claim 9 , wherein the second set of bits is offset from the first set of bits by a predetermined number of bits and the fourth set of bits is offset from the third set of bits by the predetermined number of bits.

13. The system of claim 9 , wherein the operations further comprise:

extracting a first portion of the data and refraining from extracting a second portion of the data, the first portion of the data including the first set of bits and the second set of bits.

14. The system of claim 9 , wherein the operations further comprise:

training a model to create the AI model, the training being based at least in part on one or more n-dimensional representations that are tagged as being associated with malware and one or more n-dimensional representations that are tagged as being malware free.

15. One or more non-transitory computer-readable media storing computer-executable instructions that, when executed, instruct one or more processors to perform operations comprising:

receiving data;

selecting a first set of bits in the data;

determining a first coordinate for a first point based at least in part on the first set of bits;

selecting a second set of bits in the data;

determining a second coordinate for the first point based at least in part on the second set of bits;

selecting a third set of bits in the data;

determining a first coordinate for a second point based at least in part on the third set of bits;

selecting a fourth set of bits in the data;

determining a second coordinate for the second point based at least in part on the fourth set of bits, each of the first set of bits, second set of bits, third set of bits, and fourth set of bits including a predetermined number of bits;

mapping the first point and the second point to an n-dimensional space to generate an n-dimensional representation for the data; and

causing the n-dimensional representation to be processed with an Artificial Intelligence (AI) model that is configured to detect malware.

16. The one or more non-transitory computer-readable media of claim 15 , wherein the first set of bits comprises a first byte and the second set of bits comprises a second byte that is directly adjacent to the first byte.

17. The one or more non-transitory computer-readable media of claim 15 , wherein the predetermined number of bits includes at least one byte.

18. The one or more non-transitory computer-readable media of claim 15 , wherein the second set of bits is offset from the first set of bits by a predetermined number of bits and the fourth set of bits is offset from the third set of bits by the predetermined number of bits.

19. The one or more non-transitory computer-readable media of claim 15 , wherein the operations further comprise:

extracting a first portion of the data and refraining from extracting a second portion of the data, the first portion of the data including the first set of bits and the second set of bits.

20. The one or more non-transitory computer-readable media of claim 15 , wherein the operations further comprise:

training a model to create the AI model, the training being based at least in part on one or more n-dimensional representations that are tagged as being associated with malware and one or more n-dimensional representations that are tagged as being malware free.

Assignments (2)

Continuity (4)

References Cited (243)