Thwarting malicious registry mapping modifications and...

Details Thwarting malicious registry mapping modifications and... Thwarting malicious registry mapping modifications and...

2000-01-14

2004-08-31

Barron, Gilberto (Department: 2132)

Electrical computers and digital processing systems: support

Multiple computer communication using cryptography

Protection at a particular protocol layer

C713S187000

Reexamination Certificate

active

06785818

ABSTRACT:

TECHNICAL FIELD
This invention pertains to the field of thwarting attacks on digital computers caused by malicious computer code entering the computers via map-loaded modules.
BACKGROUND ART
Since this technical field is new, there are no known items of background art relevant to the problem solved by this invention.
DISCLOSURE OF INVENTION
The present invention is an apparatus, computer-implemented method, and computer-readable medium comprising a registry (
10
) containing mappings from generic map-loaded module names (
4
) to locations (
5
) of specific map-loaded modules (
8
). Coupled to the registry (
10
) is a registry monitor module (
20
) adapted to monitor attempts to replace existing mappings (
5
) of map-loaded modules (
8
) with replacement mappings (
5
). Coupled to the map-loaded modules (
8
) is a file system monitor module (
70
) adapted to monitor attempts to insert new map-loaded modules (
8
) into the computer (
1
). Coupled to the registry monitor module (
20
) and to the file system monitor module (
70
) is a programmable control module (
30
) adapted to determine that a change in mapping is deemed to constitute a malicious code attack when at least one pre-established rule (
50
) is satisfied.


REFERENCES:
patent: 5572590 (1996-11-01), Chess
patent: 5974549 (1999-10-01), Golan
patent: 6092194 (2000-07-01), Touboul
patent: 2002/0035693 (2002-03-01), Eyres et al.
patent: 2002/0073046 (2002-06-01), David
patent: 2002/0178375 (2002-11-01), Whittaker et al.
patent: 2002/0194488 (2002-12-01), Comack et al.
patent: 2003/0115458 (2003-06-01), Song
patent: 2003/0115479 (2003-06-01), Edwards et al.
patent: 0 636 977 (1995-02-01), None
patent: WO 93 25024 (1993-12-01), None
patent: WO 99 15966 (1999-04-01), None

Affiliated with

Also associated with

Rating

Thwarting malicious registry mapping modifications and... does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Thwarting malicious registry mapping modifications and..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Thwarting malicious registry mapping modifications and... will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-3333871