US 12,265,617 B2
Labeling device and labeling program
Yuma Kurogome, Musashino (JP); Makoto Iwamura, Musashino (JP); and Jun Miyoshi, Musashino (JP)
Assigned to NIPPON TELEGRAPH AND TELEPHONE CORPORATION, Tokyo (JP)
Appl. No. 17/777,999
Filed by NIPPON TELEGRAPH AND TELEPHONE CORPORATION, Tokyo (JP)
PCT Filed Sep. 7, 2020, PCT No. PCT/JP2020/033818
§ 371(c)(1), (2) Date May 19, 2022,
PCT Pub. No. WO2021/106306, PCT Pub. Date Jun. 3, 2021.
Claims priority of application No. PCT/JP2019/046683 (WO), filed on Nov. 28, 2019.
Prior Publication US 2023/0004645 A1, Jan. 5, 2023
Int. Cl. G06F 21/56 (2013.01); G06F 18/213 (2023.01); G06F 18/22 (2023.01)
CPC G06F 21/561 (2013.01) [G06F 18/213 (2023.01); G06F 18/22 (2023.01)] 12 Claims
OG exemplary drawing
 
1. A labeling apparatus comprising:
processing circuitry configured to:
extract a feature of malware to be labeled and features of a malware group with a known label; and
identify malware or a malware group with a feature among the features of the malware group that is most similar to the feature of the malware to be labeled based on a degree of similarity between the feature of the malware to be labeled and each of the features of the malware group extracted, and give a label included in the malware or the malware group to the malware to be labeled,
wherein the processing circuitry is further configured to:
acquire a label candidate list created for malware and identify malware of the label candidate list as the malware to be labeled when the acquired label candidate list is empty,
extract a feature of the malware to be labeled identified and the features of the malware group, and
acquire the label candidate list, and, when a label is included in the acquired label candidate list, determine whether the label is of a randomly generated character string, exclude the label of the character string when it is determined that the label is of a randomly generated character string, and identify the malware of the label candidate list as the malware to be labeled when the acquired label candidate list is empty.