System, Method, and Computer Program Product for Monitoring and/or Analyzing At Least One Aspect of An Invocation of An Interface

摘要

A system, method and computer program product are provided. In use, execution of a portion of internal code of an interface is identified. Further, in response to the execution of the portion of internal code, at least one aspect of an invocation of the interface is monitored and/or analyzed.

主权项

1. A method, comprising:
identifying execution of an interface, including identifying that a code segment internal to the interface has been executed; in response to the execution of the interface, determining whether the interface was executed as a result of executing a defined entry point of the interface; and determining whether the execution is malicious based upon whether the entry point was invoked prior to execution of the code segment; wherein the entry point is located logically before the code segment.