专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090183261A1 MALWARE DETECTION WITH TAINT TRACKING 有权
标题翻译：恶意跟踪检测
公开(公告)号：US20090183261A1
公开(公告)日：2009-07-16
申请号：US12013475
申请日：2008-01-14
申请人： Marcus Peinado , Luis Irun-Briz , Laurent S. Visconti , Mark L. Niehaus , Nikola Livic
发明人： Marcus Peinado , Luis Irun-Briz , Laurent S. Visconti , Mark L. Niehaus , Nikola Livic
IPC分类号： G06F21/00 , G06F17/00
CPC分类号： G06F21/565
摘要： Malware may be identified based on attempts to use tainted data in certain ways, such as by attempting to execute the tainted data, by attempting to modify execution control based on tainted data, or by attempting to apply an existing function to the tainted data. A data's taint is determined based on the location from which the data originates. When data from a tainted source is moved to an otherwise non-tainted destination, the taint may be propagated from the source to the destination, to indicate that the destination is now of unknown safety. A component may be used to observe the operation of a process, in order to determine what data is being moved with respect to the process, and how that data is being used.
摘要翻译：可以基于尝试以某些方式使用污染数据，例如通过尝试通过尝试基于污染数据修改执行控制或通过尝试将已有功能应用于污染数据来执行污染数据来识别恶意软件。基于数据来源的位置确定数据的污点。当来自污染源的数据被移动到另外没有污染的目的地时，污点可以从源传播到目的地，以指示目的地现在是未知的安全的。可以使用组件来观察进程的操作，以便确定相对于进程移动什么数据以及如何使用该数据。

2. 发明申请

US20100128866A1 MODIFICATION OF SYSTEM CALL BEHAVIOR 审中-公开
标题翻译：系统调用行为的修改
公开(公告)号：US20100128866A1
公开(公告)日：2010-05-27
申请号：US12324658
申请日：2008-11-26
申请人： Luis Irun-Briz , Marcus Peinado , Laurent S. Visconti , Nikola Livic
发明人： Luis Irun-Briz , Marcus Peinado , Laurent S. Visconti , Nikola Livic
IPC分类号： H04M3/00
CPC分类号： G06F9/545 , G06F9/4484 , G06F2209/542
摘要： The behavior of a system call may be modified. A modification component may pre-processes and/or post-process a system call to change the behavior of the system call. Pre-processing may involve modifying arguments to the system call, replacing one system call with another, intercepting the system call, etc. Post-processing may involve modifying results and/or side effects of a system call. The modification component may pre-process and/or post-process the system call without changes to the underlying kernel service routine that is normally invoked in response to the system call. Modifying the system call's behavior may be used to implement quality of service (QoS) constraints, to allow one operating system to emulate another, to provide information about memory layout to an application, or to serve other goals.
摘要翻译：可以修改系统调用的行为。修改组件可以预处理和/或后处理系统调用以改变系统调用的行为。预处理可能涉及修改系统调用的参数，用另一个替换一个系统调用，拦截系统调用等。后处理可能涉及修改系统调用的结果和/或副作用。修改组件可以预处理和/或后处理系统调用，而不改变通常响应于系统调用而被调用的底层内核服务例程。可以使用修改系统调用的行为来实现服务质量（QoS）约束，以允许一个操作系统模拟另一个操作系统，以向应用程序提供有关存储器布局的信息，或用于其他目标。

3. 发明授权

US08074281B2 Malware detection with taint tracking 有权
标题翻译：恶意软件检测与污迹跟踪
公开(公告)号：US08074281B2
公开(公告)日：2011-12-06
申请号：US12013475
申请日：2008-01-14
申请人： Marcus Peinado , Luis Irun-Briz , Laurent S. Visconti , Mark L. Niehaus , Nikola Livic
发明人： Marcus Peinado , Luis Irun-Briz , Laurent S. Visconti , Mark L. Niehaus , Nikola Livic
IPC分类号： G06F12/14
CPC分类号： G06F21/565
摘要： Malware may be identified based on attempts to use tainted data in certain ways, such as by attempting to execute the tainted data, by attempting to modify execution control based on tainted data, or by attempting to apply an existing function to the tainted data. A data's taint is determined based on the location from which the data originates. When data from a tainted source is moved to an otherwise non-tainted destination, the taint may be propagated from the source to the destination, to indicate that the destination is now of unknown safety. A component may be used to observe the operation of a process, in order to determine what data is being moved with respect to the process, and how that data is being used.
摘要翻译：可以基于尝试以某些方式使用污染数据，例如通过尝试通过尝试基于污染的数据来修改执行控制或者通过尝试将已有功能应用于污染的数据来执行受污染的数据来识别恶意软件。基于数据来源的位置确定数据的污点。当来自污染源的数据被移动到另外没有污染的目的地时，污点可以从源传播到目的地，以指示目的地现在是未知的安全的。可以使用组件来观察进程的操作，以便确定相对于进程移动什么数据以及如何使用该数据。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式