METHODS AND APPARATUS FOR AGENT-BASED MALWARE MANAGEMENT

摘要

Methods and apparatus for providing protection against malware are disclosed. An exemplary method includes executing an agent program on a remote computer connected to a network, the agent program being configured to communicate with a base computer via the network, the agent program including a firewall arranged to block communications between the remote computer and entities on the network in accordance with predetermined rules; and configuring the firewall in accordance with rules received from the base computer.

主权项

1. A method of operating a security program on a computer, comprising:
operating the security program to impersonate or use operating system functions in monitoring objects running on the computer; determining, based upon the monitoring, whether the objects are malware.