Information security – Monitoring or scanning of software or data including attack... – Intrusion detection
Reexamination Certificate
2005-04-08
2009-12-08
Barron, Jr., Gilberto (Department: 2432)
Information security
Monitoring or scanning of software or data including attack...
Intrusion detection
C717S127000
Reexamination Certificate
active
07631356
ABSTRACT:
A method and system for efficient foreign code detection is presented. In one aspect of the invention, an authentication module examines pages which are referenced by thread stacks in a process space, where the pages may contain foreign code. The module can walk up the thread stacks to examine return address that reference such pages. In another aspect, the module checks random pages referenced by the stack. In yet another aspect, the module checks any nearby suspicious pages to checked pages referenced by the stack. Additionally, the module checks the instruction pointer referenced page, the pages and calling code described by the page fault history, and any pages with event handling functions, dynamic link library functions, or other functions that are likely to run.
REFERENCES:
patent: 5103394 (1992-04-01), Blasciak
patent: 7093239 (2006-08-01), van der Made
patent: 2004/0255163 (2004-12-01), Swimmer et al.
patent: 2005/0066354 (2005-03-01), Dellow et al.
patent: 2006/0265749 (2006-11-01), Kwon et al.
patent: WO 2004/090733 (2004-10-01), None
Pietrek, Matt. Under the Hood, Aug. 1996, Microsoft Systems Journal. http://www.microsoft.com/msj/archive/s402.aspx.
Pietrek, Matt. Under the Hood. Nov. 1996. Microsoft Systems Journal. http://www.microsoft.com/msj/archive/S2058.aspx.
Hatlelid Kristjan R.
London Uri
Shubin Vladimir A.
Barron Jr. Gilberto
Kanaan Simon
Microsoft Corporation
Woodcock & Washburn LLP
LandOfFree
System and method for foreign code detection does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with System and method for foreign code detection, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and System and method for foreign code detection will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-4126028