Method and apparatus for detection of computer viruses

Details Method and apparatus for detection of computer viruses Method and apparatus for detection of computer viruses

1993-07-29

1995-03-14

Cosimano, Edward R.

Boots, shoes, and leggings

364550, 364578, 364579, 395500, G06F 1520

Patent

active

053981960

ABSTRACT:
A behavior analyzing antivirus program detects viral infection of a target program by emulating the execution of the target program and analyzing the emulated execution to detect viral behavior. The antivirus monitor program contains both variables corresponding to the CPU's registers and emulation procedures corresponding to the CPU's instructions. The target program is loaded into memory and its execution is emulated by the antivirus monitor program. Intelligent procedures contained in the monitor program are given control between every instruction emulated so as to detect aberrant or dangerous behavior in the target program in which case the danger of a viral presence is flagged and emulation is terminated.

REFERENCES:
patent: 4080650 (1978-03-01), Beckett
patent: 4773028 (1988-09-01), Tallman
patent: 5086502 (1992-02-01), Malcom
patent: 5121345 (1992-06-01), Lentz
patent: 5144660 (1992-09-01), Rose
patent: 5233611 (1993-08-01), Triantafyllos et al.
Bowen, T., "Central Point Tool Unearths New Viruses," P.C. Week, May 31, 1993, pp. 41-42.
Excerpts From On-line Documentation for FProt Program, 1994.

Affiliated with

Also associated with

Rating

Method and apparatus for detection of computer viruses does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Method and apparatus for detection of computer viruses, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and apparatus for detection of computer viruses will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-716999