Electrical computers and digital processing systems: interprogra – Dynamic linking – late binding
Reexamination Certificate
2004-07-28
2009-08-04
Zhen, Li B (Department: 2194)
Electrical computers and digital processing systems: interprogra
Dynamic linking, late binding
C717S163000, C726S022000
Reexamination Certificate
active
07571448
ABSTRACT:
A hooking control manager hooks kernel level operations. The kernel level hooking control manager identifies a kernel level component for which to filter outgoing kernel level system calls. For each of a select set of outgoing kernel level system calls imported by the kernel level component, the kernel level hooking control manager locates the address of the system call in the kernel level component, stores the address, and patches the kernel level component with an address of alternative code to execute when the kernel level component makes the outgoing system call. Upon the unloading of the kernel level hooking control manager, for each call of the select set, the kernel level hooking control manager locates the address of the system call in the kernel level component, and patches the kernel level component so as to restore the stored address.
REFERENCES:
patent: 4776537 (1988-10-01), Garside et al.
patent: 4888798 (1989-12-01), Earnest
patent: 5050212 (1991-09-01), Dyson
patent: 5103476 (1992-04-01), Waite et al.
patent: 5182770 (1993-01-01), Medveczky et al.
patent: 5432851 (1995-07-01), Scheidt et al.
patent: 5450576 (1995-09-01), Kennedy
patent: 5530757 (1996-06-01), Krawczyk
patent: 5548532 (1996-08-01), Menand et al.
patent: 5564054 (1996-10-01), Bramnick et al.
patent: 5596711 (1997-01-01), Burckhartt et al.
patent: 5606609 (1997-02-01), Houser et al.
patent: 5625693 (1997-04-01), Rohatgi et al.
patent: 5661848 (1997-08-01), Bonke et al.
patent: 5708776 (1998-01-01), Kikinis
patent: 5765151 (1998-06-01), Senator
patent: 5799088 (1998-08-01), Raike
patent: 5802080 (1998-09-01), Westby
patent: 5854759 (1998-12-01), Kaliski, Jr. et al.
patent: 5922072 (1999-07-01), Hutchinson et al.
patent: 5956475 (1999-09-01), Burckhartt et al.
patent: 5974546 (1999-10-01), Anderson
patent: 6000032 (1999-12-01), Millard
patent: 6014744 (2000-01-01), McKaughan et al.
patent: 6014767 (2000-01-01), Glaise
patent: 6048090 (2000-04-01), Zook
patent: 6061788 (2000-05-01), Reynaud et al.
patent: 6079016 (2000-06-01), Park
patent: 6088803 (2000-07-01), Tso et al.
patent: 6366988 (2002-04-01), Skiba et al.
patent: 6823460 (2004-11-01), Hollander et al.
patent: 7216367 (2007-05-01), Szor
patent: 2005/0149947 (2005-07-01), Callender
patent: 0858031 (1998-08-01), None
patent: WO 93/25024 (1993-12-01), None
patent: WO 95/15522 (1995-06-01), None
patent: WO 95/22794 (1995-08-01), None
Richter, J., Microsoft.com web pages (online). “Design a Windows NT Service to Exploit Special Operating System Facilities”, Oct. 1997 (retrieved Aug. 29, 2003). Retrieved from the Internet: <URL: http://www.microsoft.com/msj/1097/winnt.aspx.
Parkhouse, Jayne, “Pelican SafeTNet 2.0”, [online] Jun. 2000, SC Magazine Product Review, [retrieved Dec. 1, 2003] Retrieved from the Internet: <URL: http://www.scmagazine.com/standalone/pelican/sc—pelican.html>.
Ore, Oystein, “Number Theory and Its History”, 1976 Gudron Ore, U.S.A. pp. 124-129.
Schneier, Bruce, “Applied Cryptography”, 2ed. 1996, Bruce Schneier, U.S.A. pp. 436-441.
Nair, et al., “A Symbol Based Algorithm for Hardware Implementation of Cycle Redundancy Check”, IEEE, 1997.
Fenwick & West LLP
Symantec Corporation
Zhen Li B
LandOfFree
Lightweight hooking mechanism for kernel level operations does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Lightweight hooking mechanism for kernel level operations, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Lightweight hooking mechanism for kernel level operations will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-4130568