Detection and elimination of macro viruses

Details Detection and elimination of macro viruses Detection and elimination of macro viruses

1997-08-14

1999-11-02

Beausoliel, Jr., Robert W.

Electrical computers and digital processing systems: support

Multiple computer communication using cryptography

Protection at a particular protocol layer

713200, 380 3, 380 4, G06F 1214

Patent

active

059789174

ABSTRACT:
Apparatus and method for detecting the presence of macro viruses within a digital computer (1). An application program (5) is associated with the digital computer (1). A global environment (13) is associated with the application program (5). The application program (5) generates at least one local document (11). Macros contained within the global environment (13) and the local document(s) (11) are executed in a simulated manner by an emulator (15). At least one preselected decision criterion is used by a detection module (17) to declare when a macro virus is deemed to be present. Such a criterion is typically the presence of a bidirectional macro, i.e., a macro that copies from a local document (11) to the global environment (13) and vice-versa. Macros deemed to be viruses are preferably deleted by a repair module (19). Additional deletion criteria may include the presence of macros that have the same source name or the same destination name as a bidirectional macro. In the preferred emulation steps, emulator (15) tests all of the macros associated with computer (1) in two steps. The first step assumes that the macros reside within the global environment (13), regardless of whether they reside within the global environment (13) or within a local document (11). The second step assumes that the macros reside within a local document (11), regardless of whether they reside within a local document (11) or within the global environment (13).

REFERENCES:
patent: 5398196 (1995-03-01), Chambers
patent: 5832208 (1998-11-01), Chen et al.
patent: 5854916 (1998-12-01), Nachenberg
To LOOK Software System Inc. is cited for "Virus Alert for Macros" 1997.
Bontchev, Vesselin, "Possible macro virus attacks and how to prevent them", Computers & Security, vol. 15, No. 7, pp. 595-626, 1996, United Kingdom.

Affiliated with

Also associated with

Rating

Detection and elimination of macro viruses does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Detection and elimination of macro viruses, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Detection and elimination of macro viruses will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-2150959