Distinguishing legitimate modifications from malicious...

Electrical computers and digital processing systems: support – Computer program modification detection by cryptography

Reexamination Certificate

Rate now

  [ 0.00 ] – not rated yet Voters 0   Comments 0

Details

C726S022000, C726S026000, C380S046000, C713S188000, C713S189000

Reexamination Certificate

active

07373519

ABSTRACT:
Prior to a modification of an executable computer file (101), a modification analysis manager (111) stores (1101) content concerning a specified number of specified sized blocks (115) of a specified section of the executable file (101). After the modification of the executable file (101), the modification analysis manager (111) compares (1103), for each block (115), the content at the location of the block (115) after the modification of the executable file (101) with the content of the block (115) prior to the modification. The modification analysis manager (101) determines (1105) the status of the modification, responsive to a result of the comparison.

REFERENCES:
patent: 3969723 (1976-07-01), Kennicott
patent: 4558413 (1985-12-01), Schmidt et al.
patent: 4714992 (1987-12-01), Gladney et al.
patent: 4809170 (1989-02-01), Leblang et al.
patent: 4962532 (1990-10-01), Kasiraj et al.
patent: 5155847 (1992-10-01), Kirouac et al.
patent: 5182806 (1993-01-01), McKeeman et al.
patent: 5204960 (1993-04-01), Smith et al.
patent: 5377354 (1994-12-01), Scannell et al.
patent: 5414833 (1995-05-01), Hershey et al.
patent: 5448045 (1995-09-01), Clark
patent: 5479654 (1995-12-01), Squibb
patent: 5485575 (1996-01-01), Chess et al.
patent: 5495610 (1996-02-01), Shing et al.
patent: 5508817 (1996-04-01), Kunigami
patent: 5519866 (1996-05-01), Lawrence et al.
patent: 5555346 (1996-09-01), Gross et al.
patent: 5557723 (1996-09-01), Holt et al.
patent: 5566335 (1996-10-01), Nash et al.
patent: 5572590 (1996-11-01), Chess
patent: 5574906 (1996-11-01), Morris
patent: 5581764 (1996-12-01), Fitzgerald et al.
patent: 5613108 (1997-03-01), Morikawa
patent: 5619648 (1997-04-01), Canale et al.
patent: 5649200 (1997-07-01), Leblang et al.
patent: 5671398 (1997-09-01), Neubauer
patent: 5673387 (1997-09-01), Chen et al.
patent: 5684875 (1997-11-01), Ellenberger
patent: 5694616 (1997-12-01), Johnson et al.
patent: 5699275 (1997-12-01), Beasley et al.
patent: 5717923 (1998-02-01), Dedrick
patent: 5729743 (1998-03-01), Squibb
patent: 5774552 (1998-06-01), Grimmer
patent: 5781901 (1998-07-01), Kuzma
patent: 5790856 (1998-08-01), Lillich
patent: 5794210 (1998-08-01), Goldhaber et al.
patent: 5799189 (1998-08-01), Koser et al.
patent: 5832220 (1998-11-01), Johnson et al.
patent: 5892900 (1999-04-01), Ginter et al.
patent: 5893113 (1999-04-01), McGrath et al.
patent: 5903880 (1999-05-01), Biffar
patent: 5905896 (1999-05-01), Delannoy
patent: 5909581 (1999-06-01), Park
patent: 5911048 (1999-06-01), Graf
patent: 5917489 (1999-06-01), Thurlow et al.
patent: 5933647 (1999-08-01), Aronberg et al.
patent: 5933811 (1999-08-01), Angles et al.
patent: 5948058 (1999-09-01), Kudoh et al.
patent: 5948104 (1999-09-01), Gluck et al.
patent: 5953532 (1999-09-01), Lochbaum
patent: 5960204 (1999-09-01), Yinger et al.
patent: 5960411 (1999-09-01), Hartman et al.
patent: 5999967 (1999-12-01), Sundsted
patent: 6006034 (1999-12-01), Heath et al.
patent: 6035423 (2000-03-01), Hodges et al.
patent: 6052531 (2000-04-01), Waldin et al.
patent: 6057841 (2000-05-01), Thurlow et al.
patent: 6073142 (2000-06-01), Geiger et al.
patent: 6081814 (2000-06-01), Mangat et al.
patent: 6088803 (2000-07-01), Tso et al.
patent: 6092080 (2000-07-01), Gustman
patent: 6119165 (2000-09-01), Li et al.
patent: 6134658 (2000-10-01), Multerer et al.
patent: 6138146 (2000-10-01), Moon et al.
patent: 6145079 (2000-11-01), Mitty et al.
patent: 6146026 (2000-11-01), Ushiku
patent: 6147977 (2000-11-01), Thro et al.
patent: 6151643 (2000-11-01), Cheng et al.
patent: 6161130 (2000-12-01), Horvitz et al.
patent: 6161181 (2000-12-01), Haynes et al.
patent: 6178551 (2001-01-01), Sana et al.
patent: 6185603 (2001-02-01), Henderson et al.
patent: 6199081 (2001-03-01), Meyerzon et al.
patent: 6260059 (2001-07-01), Ueno et al.
patent: 6345256 (2002-02-01), Milsted et al.
patent: 6349407 (2002-02-01), Towfiq
patent: 6363415 (2002-03-01), Finney et al.
patent: 6374237 (2002-04-01), Reese
patent: 6418555 (2002-07-01), Mohammed
patent: 6421669 (2002-07-01), Gilmour et al.
patent: 6460036 (2002-10-01), Herz
patent: 6460050 (2002-10-01), Pace et al.
patent: 6484315 (2002-11-01), Ziese
patent: 6490587 (2002-12-01), Easty et al.
patent: 6493722 (2002-12-01), Daleen et al.
patent: 6510552 (2003-01-01), Benayoun et al.
patent: 6535894 (2003-03-01), Schmidt et al.
patent: 6609196 (2003-08-01), Dickinson et al.
patent: 6651249 (2003-11-01), Waldin et al.
patent: 6654787 (2003-11-01), Aronson et al.
patent: 6771765 (2004-08-01), Crowther et al.
patent: 2001/0018739 (2001-08-01), Anderson et al.
patent: 2002/0007400 (2002-01-01), Pederson
patent: 2002/0069363 (2002-06-01), Winburn
patent: 2002/0164020 (2002-11-01), Mustafa
patent: 2002/0178375 (2002-11-01), Whittaker et al.
patent: 2004/0133776 (2004-07-01), Putzolu
patent: 0230616 (1987-08-01), None
patent: 0735474 (1996-10-01), None
patent: 0774720 (1997-05-01), None
patent: WO 96/32679 (1996-10-01), None
patent: WO 99/22325 (1999-05-01), None
patent: WO 00/29945 (2000-05-01), None
patent: WO 01/37124 (2001-05-01), None
Jee, et al., “A Generic Virus Detection Agent on the Internet”, pp. 210-219, 1997 IEEE, retrieved May 10, 2006, Taiwan.
Bellare et al., “Incremental Cryptography and Application to Virus Protection”, pp. 45-56, 1995 ACM, retrieved May 10, 2006, New York, NY.
“User-Friendly Interface for Applying Specific Levels of Coordinated Updates to Software in the Field,” IBM Technical Disclosure Bulletin, vol. 31, No. 10, Mar. 1989, Armonk, NY, U.S.A.
Ambriola, Vincenzo; Bendix, Lars; and Ciancarini, Paolo, “The Evolution of Configuration Management and Version Control,” Software Engineering Journal, Nov. 1990, pp. 303-310, retrieved from IEEE database, Sep. 24, 2002, U.S.A.
Conradi, Reidar and Westfechtel, Bernhard, “Configuring Versioned Software Products,” Department of CS and Telematics, Norwegian Institute of Technology, Trondhiem, Norway, 1996, retrieved from http://citeseer.nj.nec.com/conradi96 on Sep. 24, 2002.
Grundy, et al., “Support For Collaborative, Integrated Software Development,” Proc 95 Software Engineering Environments, Abstract Only, Apr. 1995, U.S.A.
Hedin, Gorel, “Incremental Execution In A Programming Environment Based On Compilation,” Proc. Of Nineteenth Hawaii Intl. Conf. On System Sciences, Abstract Only, Jan. 1986, U.S.A.
Hurwitz Group, “Application Management for Distributed Applications,” pp. 1-7, Jun. 1998, U.S.A.
Lindsay, Peter; Liu, Yaowei, and Traynor, Owen, “A Generic Model for Fine Grained Configuration Management Including Version Control and Traceability,” 1997 IEEE, retrieved from the IEEE database Sep. 24, 2002, U.S.A.
Marimba, “Castanet 3.0 Product Family,” Jun. 1998, U.S.A.
Marimba, “Castanet Infrastructure Suite,” Jun. 1998, U.S.A.
Marimba, “Castanet Management Suite,” Jun. 1988, U.S.A.
Marimba, “Castanet Production Suite,” Jun. 1998, U.S.A.
Pocket Soft, “.RTPatch® Professional for Windows, NT, and DOS Binary Update System,” pp. 1-6. Jun. 23, 1998, http://www.pocketsoft.com\whtwind.html, U.S.A.
Pollock, Lori, “Incremental Version of Iterative Data Flow Analysis,” IEEE Trans Software Eng., v 15, n 12, Abstract Only, Dec. 1989, U.S.A.
Reichenberger, Christoph, “Orthogonal Version Management,” Universitat Linz, Institute fur Informatik, Austria, 1989 ACM.
Suk Oh, AM, et al. “An Incremental Update Propagation Scheme For A Cooperative Transaction Model,” Proc. 7th Intl. Workshop On Database And Expert Systems Appl, Abstract Only, Sep. 1996, U.S.A.
Keneipp, Ray, Traffic Shaping [Online], May 14, 2001, [retrieved from the Internet on Apr. 27, 2004] Retrieved from the Internet: <URL: Itworld.com—supersite manager—Traffic Shaping http://www.itworld.com
l/sup—mgr/05142001/>.
ISP-Planet Staff, Slower Spam Would Annoy Spammers [Online] Feb. 20, 2003, [retrieved from the Internet on Apr. 22, 2005]. Retrieved from the Internet: <

LandOfFree

Say what you really think

Search LandOfFree.com for the USA inventors and patents. Rate them and share your experience with other people.

Rating

Distinguishing legitimate modifications from malicious... does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Distinguishing legitimate modifications from malicious..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Distinguishing legitimate modifications from malicious... will most certainly appreciate the feedback.

Rate now

     

Profile ID: LFUS-PAI-O-2804752

  Search
All data on this website is collected from public sources. Our data reflects the most accurate information available at the time of publication.