Processor emulator module having a variable pre-fetch queue size

Details Processor emulator module having a variable pre-fetch queue size Processor emulator module having a variable pre-fetch queue size

1996-07-19

1998-06-09

Beausoliel, Jr., Robert W.

Cryptography

Key management

Having particular key generator

39518314, 39518701, 380 22, 380 50, G06F 1300, H04K 100, H04L 900

Patent

active

057650306

ABSTRACT:
An emulation module (110) includes a pre-fetch queue (116) having an adjustable size (126) to eliminate any dependence of virus decryption routines on the size of the pre-fetch queue (116) when emulating executable files to test for the presence of virus infections. An executable file is tested by setting (210, 258) the size of the emulator's pre-fetch queue (116) and emulating (220) the file under the guidance of an emulation control module (130). Emulated instructions are monitored and a flag is set (230) when any instructions are modified (224) after being copied to the pre-fetch queue and subsequently executed (228). Emulation continues until the emulation control module (130) indicates (230) that the file should be scanned for virus signatures. If no virus signatures are detected (234) and the flag is set (244), the size of the pre-fetch queue is reduced (258) and the process is repeated. An executable file is declared virus-free (250) if the file is emulated (220) without setting the flag (230) and no virus signatures are detected (234). The executable file is declared virus-infected (240) when virus signatures are detected (234), independent of whether the flag is set (230). For Intel processors, pre-fetch queue sizes of 32, 16, 8, and zero bytes may be emulated.

REFERENCES:
patent: 4975950 (1990-12-01), Lentz
patent: 5121345 (1992-06-01), Lentz
patent: 5144660 (1992-09-01), Rose
patent: 5319776 (1994-06-01), Hile et al.
patent: 5321840 (1994-06-01), Ahlin et al.
patent: 5349655 (1994-09-01), Mann
patent: 5359659 (1994-10-01), Rosenthal
patent: 5398196 (1995-03-01), Chambers
patent: 5408642 (1995-04-01), Mann
patent: 5421006 (1995-05-01), Jablon et al.
patent: 5440723 (1995-08-01), Arnold et al.
patent: 5442699 (1995-08-01), Arnold et al.
patent: 5485575 (1996-01-01), Chess et al.
"Automated Program Analysis for Computer Virus Detection", IBM Technical Disclosure Bulletin, vol. 34, No. 2, Jul. 1991, pp. 415-416.
"Artificial Immunity for Personal Computers", IBM Technical Disclosure Bulletin, vol. 34, No. 2, Jul. 1991, pp. 150-154.
Marshall, G., "Pest Control", LAN Magazine, Jun. 1995, pp. 55,56,58,61,63,64 & 67.
Alan Solomon: "The Virus Authors Strike Back" Computer & Security, vol. 11, No. 7, Nov., 1992; pp. 602-606.
Laszlo Szilagyi: "Self-modiying code identifies uP type" EDN Electrical Design News, vol. 35, No. 9, 26 Apr. 1990, Newton, Massachusetts, US; pp. 232-234.
Veldman, Frans, "Virus Writing Is High-Tech Infosecurity Warfare", Security on the I-Way '95, 1995, pp. L-1-L-16, U.S.A.
Symantec Corporation, "Norton AntiVirus for Windows 95 & Special Subscription Offer", 1995, U.S.A.
"ThunderBYTE AntiVirus Utilities User Manual", ThunderBYTE B.V., 1995, pp. i-191, Wijchen, The Netherlands.
"Virus Infection Techniques: Part 3", Virus Bulletin, Jan. 1995, pp. 006-007, Oxfordshire, England.
"UK-Sophos Intros Unix Virus Detection Software Jan. 26, 1995", Newsbytes News Network, Jan. 26, 1995, U.S.A.
Cohen, Frederick B., "A Short Course on Computer Viruses", John Wiley & Sons, Inc., Second Edition, pp. 54-55, 199-209, 1994, U.S.A.
Veldman, Frans, "Heuristic Anti-Virus Technology", Proceedings of the International Virus Protection and Information Security Council, Apr. 1, 1994.
Karney, James, "Changing the Rules on Viruses; Trend Micro Devices Inc.'s PC Rx 4.0 virus Detection Software", PC Magazine, Aug. 1994, vol. 13, No. 14; p. NE36, U.S.A.
Wells, Joseph, "Viruses in the Wild", Proceeding of the International Virus Protection and Information Security Council, Apr. 1, 1994.
Gordon, Scott, "Viruses & Netware", Proceedings of the International Virus Protection and Information Security Council, Mar. 31, 1994.
Solomon, Alan, "Viruses & Polymorphism", Proceedings of the International Virus Protection and Information Security Council, Mar. 31, 1994.
Case, Tori, "Viruses: An Executive Brief", Proceedings of the International Virus Protection and Information Security Council, Mar. 31, 1994.
Gotlieb, Leo, "End users and responsible computing: Information Management", CMA--the Management Accounting Magazine, Sep. 1993, vol. 67, No. 7, p. 13, U.S.A.
"Network Management; LAN Buyers Guide: Network Management; Buyers Guide", LAN Magazine, Aug. 1992, vol. 7; No. 8, p. 188, U.S.A.
"Anti-virus Company Claims Polymorphic Breakthrough Jul. 10, 1992", Newsbytes News Network, Jul. 10, 1992, U.S.A.
Schnaidt, Patricia, "Security; data security issues, Lesson 44; Tutorial", LAN Magazine, Mar. 1992, U.S.A.
Skulason, Fridrik, "For Programmers", Virus Bulletin, Jul. 1990, pp. 10-11, Oxon, England.
Digitext, "Dr. Solomon's Anti-Virus Toolkit for Windows and DOS", S&S International PLC, Jan. 1995, pp. 1-15, 47-65, 75-77, 91-95, 113-115, and 123-142, United Kingdom.

Affiliated with

Also associated with

Rating

Processor emulator module having a variable pre-fetch queue size does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Processor emulator module having a variable pre-fetch queue size, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Processor emulator module having a variable pre-fetch queue size will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-2214696