会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 4. 发明授权
    • Interpreter with virtualized interface
    • 解释器与虚拟化界面
    • US06192512B1
    • 2001-02-20
    • US09160117
    • 1998-09-24
    • David M Chess
    • David M Chess
    • G06F945
    • G06F9/45508G06F9/455G06F21/563G06F21/566
    • A computer application program subsystem (100) includes a program interpreter (120) and an application program interface (API 110) through which an external program requests an execution of a program of interest, such as a macro, in a specified simulated environment. The external program that requests the execution of the program of interest may further specify a simulated application state. The program of interest is written in a program language that the interpreter can interpret. The subsystem further includes an output path for returning to the external program at least one indication of what action or actions the program of interest would have taken if the program of interest had been run in a real environment that corresponds to the specified simulated environment. The output path may be implemented using a callback function that is triggered upon the occurrence of an instruction of the program of interest satisfying at least one notification criterion, and/or upon the occurrence of the program of interest satisfying at least one termination criterion. The methods and apparatus can be useful in detecting an occurrence of viral behavior in a macro by interpreting the macro in the specified virtual environment and virtual application state, and then notifying the external program when the macro performs some predetermined activity, such as writing data to some predetermined region of system memory.
    • 计算机应用程序子系统(100)包括程序解释器(120)和应用程序接口(API 110),外部程序通过该应用程序接口(API 110)在指定的模拟环境中请求诸如宏的程序的执行。 请求执行感兴趣的程序的外部程序可以进一步指定模拟的应用状态。 感兴趣的程序是用解释器可以解释的程序语言编写的。 子系统进一步包括输出路径,用于返回外部程序的至少一个指示,如果感兴趣的程序已经在对应于指定的模拟环境的真实环境中运行,则该程序将采取什么动作或动作。 输出路径可以使用回调函数来实现,所述回调函数是在出现满足至少一个通知标准的感兴趣的程序的指令时触发的,和/或在出现满足至少一个终止标准的感兴趣程序时被触发。 该方法和装置可用于通过解释指定的虚拟环境和虚拟应用状态中的宏来检测宏中的病毒行为的发生,然后当宏执行某些预定的活动时通知外部程序,例如将数据写入 一些系统存储器的预定区域。