Method and system for indicating an executable as trojan horse

Details Method and system for indicating an executable as trojan horse Method and system for indicating an executable as trojan horse

2003-05-13

2009-10-13

Chaudry, M. Mujtaba K (Department: 2112)

Error detection/correction and fault detection/recovery

Pulse or data error handling

Error/fault detection technique

C235S380000, C506S028000, C726S023000, C726S024000

Reexamination Certificate

active

07603614

ABSTRACT:
A method and system for indicating an executable as Trojan Horse, based on the CRC values of the routines of an executable. The method comprising a preliminary stage in which the CRC values of the routines of known Trojan Horses are gathered in a database, and a stage in which indicating an executable as Trojan Horse is carried out by the correspondence of the CRC values of the routines of said executable to the CRC values of the known Trojan Horses, as gathered in said database. The system comprising means for calculating the CRC values of routines; means for identifying the borders of the routines of an executable; a database system, for storing the CRC values of routines of known Trojan Horses; and means for determining the correspondence between two groups of CRC values, thereby enabling detection of the correspondence of an executable to at least one known Trojan Horse.

REFERENCES:
patent: 5359659 (1994-10-01), Rosenthal
patent: 7058978 (2006-06-01), Feuerstein et al.
patent: 7085936 (2006-08-01), Moran
patent: 2002/0083341 (2002-06-01), Feuerstein et al.
patent: 2005/0223239 (2005-10-01), Dotan
patent: 0656587 (1995-06-01), None
patent: 1202596 (2002-05-01), None

Affiliated with

Also associated with

Rating

Method and system for indicating an executable as trojan horse does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Method and system for indicating an executable as trojan horse, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and system for indicating an executable as trojan horse will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4058995