Information security – Monitoring or scanning of software or data including attack...
Reexamination Certificate
2004-03-12
2008-10-07
Moazzami, Nasser (Department: 2136)
Information security
Monitoring or scanning of software or data including attack...
C713S187000, C726S026000
Reexamination Certificate
active
07434260
ABSTRACT:
The present invention relates to a method for detecting malicious code patterns in consideration of control and data flows. In the method of the present invention, a malicious code pattern is detected by determining whether values of tokens (variables or constants) included in two sentences to be examined will be identical to each other during execution of the sentences, and the determination on whether the values of the tokens will be identical to each other during the execution is made through classification into four cases: a case where both tokens in two sentences are constants, a case where one of tokens of two sentences is a constant and the other token is a variable, a case where both tokens of two sentences are variables and have the same name and range, and a case where both tokens of two sentences are variables but do not have the same name and range. According to the present invention, it is possible to exclude a false positive error that may occur in conventional comparison of variable names and to lower a false negative error rate, thereby improving the accuracy of detection of malicious behaviors.
REFERENCES:
patent: 4843545 (1989-06-01), Kikuchi
patent: 5937196 (1999-08-01), Schmidt et al.
patent: 6697950 (2004-02-01), Ko
patent: 7185327 (2007-02-01), Scales
patent: 2003/0159090 (2003-08-01), Wray et al.
patent: 2004/0205411 (2004-10-01), Hong et al.
patent: 2005/0108562 (2005-05-01), Khazan et al.
patent: 2006/0026675 (2006-02-01), Cai et al.
Wagner, David and Dean, Drew. Intrusion Detection via static Analysis. 2001 Proceedings of the IEEE Symposium on security and Privacy. 2001 IEEE pp. 156-168.
Cho Si-Haeng
Hong Man-Pyo
Lee Sung-Wook
Ajou University Industry Cooperation Foundation
Dilworth & Barrese LLP.
Moazzami Nasser
Yalew Fikremariam
LandOfFree
Method for detecting malicious code patterns in... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Method for detecting malicious code patterns in..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method for detecting malicious code patterns in... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-4005888