System for and method of detecting malware in macros and...

Details System for and method of detecting malware in macros and... System for and method of detecting malware in macros and...

2004-01-19

2009-02-17

Nalven, Andrew L (Department: 2434)

Information security

Monitoring or scanning of software or data including attack...

Intrusion detection

Reexamination Certificate

active

07493658

ABSTRACT:
An anti malware scanner for files is provided with means for processing script and macro files and flagging them as suspect or not based upon an automated analysis of source code in the file. This analysis involves separating the program source into groups of parts such as comment, variable names and routine names, eliminating duplicates and performing a character frequency distribution analysis of the resulting strings. The system may include an exception list to omit flagging a file as suspect if it is on the exception list.

REFERENCES:
patent: 5907834 (1999-05-01), Kephart et al.
patent: 7134141 (2006-11-01), Crosbie et al.
patent: 7210041 (2007-04-01), Gryaznov et al.
patent: 2002/0066024 (2002-05-01), Kwan
patent: 2003/0120953 (2003-06-01), Radatti
patent: 02/10888 (2001-07-01), None
patent: WO 02/10888 (2002-02-01), None
Weber M et al: “A toolkit for detecting and analyzing malicious software” Proceedings of the 18th Annual Computer Security Applications Conference Dec. 9, 2002 pp. 423-431 XP010627054 paragraphs 0003, 03.1, 03.3, 03.4.
Veldman F: “Combating Vruses Heuristically” Virus Bulletin Conference, Virus Bulletin Ltd., Abington, GB, Sep. 1993 pp. 67-75 XP000828110 paragraphs 03.2, 03.3.

Affiliated with

Also associated with

Rating

System for and method of detecting malware in macros and... does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with System for and method of detecting malware in macros and..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and System for and method of detecting malware in macros and... will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4098056