SYSTEM AND PROCESS FOR MONITORING MALICIOUS ACCESS OF PROTECTED CONTENT

摘要

A method detects unauthorized access of data, and includes receiving data from a content provider by a content reproducing device; storing the received data in a memory storage device of the content reproducing device; obtaining an address range of a buffer of the content reproducing device; intercepting system application programming interface calls related to memory access of the address range of the buffer; comparing the intercepted system application programming interface calls to an expected sequence of memory access calls; and determining that a particular memory access call is unauthorized when the particular memory access call accesses the address range of the buffer while not belonging to the expected sequence of memory access calls.