US 11,657,149 B2
Behavioral threat detection virtual machine
Eric Klonowski, Broomfield, CO (US); and Fred Krenson, Denver, CO (US)
Assigned to WEBROOT INC., Broomfield, CO (US)
Filed by Webroot Inc., Broomfield, CO (US)
Filed on Jun. 11, 2021, as Appl. No. 17/345,761.
Application 17/345,761 is a continuation of application No. 16/366,098, filed on Mar. 27, 2019, granted, now 11,080,394.
Prior Publication US 2021/0303685 A1, Sep. 30, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/55 (2013.01); G06F 9/455 (2018.01)
CPC G06F 21/554 (2013.01) [G06F 9/45558 (2013.01); G06F 2009/45587 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A system comprising:
a processor; and
a non-transitory computer readable medium storing instructions for:
identifying a rule virtual machine in a pending execution state, wherein the rule virtual machine is associated with a rule, an event queue, and a wait packet queue;
determining whether an event packet of an event queue matches a wait packet of a wait packet queue, wherein the wait packet is associated with the rule virtual machine in the pending execution state and the rule virtual machine is associated with a rule, the event queue and the wait packet queue;
when the event packet matches the wait packet, resuming execution of the rule virtual machine by processing at least one instruction of the rule; and
halting execution of the rule virtual machine when a determination is made for the rule.