Information security – Monitoring or scanning of software or data including attack... – Intrusion detection
Reexamination Certificate
2005-05-10
2010-06-08
Barron, Jr., Gilberto (Department: 2432)
Information security
Monitoring or scanning of software or data including attack...
Intrusion detection
C713S164000, C713S188000
Reexamination Certificate
active
07735138
ABSTRACT:
Disclosed are techniques for performing an antivirus task in a mobile wireless device running an embedded operating system. In one embodiment, calls intended for an application programming interface (API) function code is redirected to an antivirus function code. The redirection to the antivirus function code may be performed by modifying a kernel structure to point to a modified entry list instead of an API entry list. The redirection to the antivirus function code may also be performed by modifying the API function code to allow the antivirus function code to execute before the API function code. The kernel structure or the API function code may be properly restored back to its original form. Software implementations of these techniques may be readily loaded and unloaded, and may not require re-installation of the embedded operating system.
REFERENCES:
patent: 6327579 (2001-12-01), Crawford
patent: 2002/0042886 (2002-04-01), Lahti et al.
patent: 2002/0178375 (2002-11-01), Whittaker et al.
patent: 2002/0178381 (2002-11-01), Lee et al.
patent: 2003/0079145 (2003-04-01), Kouznetsov et al.
patent: 2003/0177397 (2003-09-01), Samman
patent: 2003/0182431 (2003-09-01), Sturniolo et al.
patent: 2004/0054911 (2004-03-01), Chennakeshu et al.
patent: 2004/0083384 (2004-04-01), Hypponen
patent: 2004/0158741 (2004-08-01), Schneider
patent: 2004/0237079 (2004-11-01), Cox et al.
patent: 2005/0033975 (2005-02-01), Lahti et al.
patent: 2005/0229250 (2005-10-01), Ring et al.
patent: 1 316 873 (2003-06-01), None
patent: 1 316 873 (2004-12-01), None
patent: WO 03/017068 (2003-02-01), None
patent: WO 03/017068 (2003-02-01), None
API Spying Techniques for Windows 9x, NT and 2000; pp. 1-9; Copyright 1999, 2000 Yariv Kaplan; [retrieved on Feb. 23, 2005]; Retrieved from the internet: <URL:http://www.internals.com/articles/apispy/apispy.html>.
Webopedia; What is Kernel?—A word definition from the Webopedia Computer Dictionary; pp. 1-3; Copyright 2004, Jupitermedia Corporation; [retrieved on Apr. 15, 2005]; Retrieved from the internet: <URL:http://www.webopedia.com/TERM/k/kernel.html>.
Real-Time operating system—Wikipedia, the free encyclopedia; pp. 1-4; [retrieved on Apr. 18, 2005]; Retrieved from the Internet: <URL:http//en.wikipedia.org/wiki/Real-time—operating—system.html>.
Seung-Woo Kim, “Intercepting System API Calls” May 13, 2004, pp. 1-5, [retrieved on Apr. 19, 2005], Intel Software Forums, <URL: http://softwareforums.intel.com/ids.html>.
POSIX Threads Programming; Jan. 31, 2003; pp. 1-38; [retrieved on Apr. 15, 2005]; Retrieved from the Internet: URL: http://www.llnl.gov/computing/tutorials/workshops/workshop/pthreads/MAIN.html>.
McAfee Netshield for Netware, Jul. 31, 2000, pp. 70-71, XP-002241250.
PCT International Search Report for International Application No. PCT/JP2006/300567 (4 sheets). Jun. 2006.
Barron Jr. Gilberto
Nobahar Abdulhakim
Okamoto & Benedicto LLP
Trend Micro Incorporated
LandOfFree
Method and apparatus for performing antivirus tasks in a... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Method and apparatus for performing antivirus tasks in a..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and apparatus for performing antivirus tasks in a... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-4249117