System and method for software application remediation

摘要

Disclosed is a method and system for software remediation. A data storage device may store one or more sets of related software application image blocks, wherein a set of image blocks is associated with a software application and is generated by parsing components of the software application, such that said image blocks include at least a partial image of a file associated with the application, and at least one of: (1) registry keys and values associated with the application, and (2) operating system objects associated with the application. A communication module may exchange characterization data relating to image blocks with a client computer. A customized check module may be provided for providing the client computer with a set of one or more customized checks, and designate an image block as anomalous based on the result of a check. A remediation module may be provided for repairing the anomalous image block.

主权项

1. A software remediation system comprising:
a data storage device storing one or more sets of related software application image blocks, wherein a set of image blocks is associated with a software application and is generated by parsing components of the software application and related data objects, such that said image blocks include at least a partial image of a file associated with the application, and at least one of: (1) registry keys and values associated with the application, and (2) operating system objects associated with the application; a communication module adapted to exchange data relating to image blocks with a client computer; an image block comparison module adapted to: (1) compare image blocks from a client computer with reference image blocks, and (2) designate a given installed application image block on the client computer as suspected to be anomalous based on a mismatch between the given image block and a corresponding reference image block; a customized check module adapted to: (1) provide the client computer with a set of one or more customized checks, including at least one check specific to the given image block designated as suspected to be anomalous, and (2) designate the given image block as anomalous based on the results of the set of one or more checks; and a remediation module adapted to: (1) provide the client computer with a repair procedure and the corresponding image block of the one or more sets of image blocks to replace the given image block designated as anomalous, and (2) selectively replace the given image block with the corresponding image block; wherein an anomalous image block is an image block containing data inconsistent with data contained in a corresponding reference image block.