On-access scan of memory for malware

Details On-access scan of memory for malware On-access scan of memory for malware

2005-03-01

2010-11-16

Revak, Christopher A (Department: 2431)

Information security

Monitoring or scanning of software or data including attack...

Intrusion detection

C711S202000, C711S217000, C714S015000, C714S006130, C714S038110, C726S022000, C726S023000, C726S025000, C726S001000, C713S168000, C713S176000

Reexamination Certificate

active

07836504

ABSTRACT:
The present invention provides a system, method, and computer-readable medium for identifying malware that is loaded in the memory of a computing device. Software routines implemented by the present invention track the state of pages loaded in memory using page table access bits available from a central processing unit. A page in memory may be in a state that is “unsafe” or potentially infected with malware. In this instance, the present invention calls a scan engine to search a page for malware before information on the page is executed.

REFERENCES:
patent: 2002/0144129 (2002-10-01), Malivanchuk et al.
patent: 2003/0115479 (2003-06-01), Edwards et al.
patent: 2004/0015712 (2004-01-01), Szor
patent: 2004/0064668 (2004-04-01), Kjos et al.
patent: 2004/0158729 (2004-08-01), Szor
patent: 2004/0168070 (2004-08-01), Szor
patent: 2005/0055558 (2005-03-01), Carmona
patent: 2006/0130141 (2006-06-01), Kramer et al.
Peter Szor “Memory Scanning Under Windows NT”, Virus Bulletin Conference, Sep. 1999.

Affiliated with

Also associated with

Rating

On-access scan of memory for malware does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with On-access scan of memory for malware, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and On-access scan of memory for malware will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4180401