Abstract: The present invention discloses system and method for adaptive deception orchestration is disclosed.

Abstract: The present invention discloses system and method for adaptive deception orchestration is disclosed.

Abstract: The present invention discloses a system and method for extracting malware capability. The system comprises a malware execution subsystem configured to execute a malware application in an isolated computing environment, detect one or more changes in system instances and obtain one or more system application programming interface (API) calls and their execution timestamp data from the executed malware application, a malware activity capturing subsystem configured to sort the system API calls based on the obtained timestamp data, generate a trigram sequence from the sorted system API calls, process the trigram sequence to generate one or more feature vectors, a malware capability extraction subsystem configured to classify the received feature vectors based on one or more malignant capabilities of the executed malware and generate a threat report based on analysis of the classified malignant capabilities of the executed malware.