发明名称 |
System and method for detecting malware that interferes with a user interface |
摘要 |
System and method for detecting ransomware. A current user behavior pattern is monitored based on user input via a user input device. The user behavior is compared against a reference set of behavior patterns associated with user frustration with non-responsiveness of the user interface module. A current status pattern of the operating system is also monitored. The current status pattern is compared against a reference set of operating system status patterns associated with predefined ransomware behavior. In response to indicia of current user frustration with non-responsiveness of the user interface, and further in response to indicia of the current status pattern having a correlation to the predefined ransomware behavior, an indication of a positive detection of ransomware executing on the computer system is provided. |
申请公布号 |
EP2750066(A2) |
申请公布日期 |
2014.07.02 |
申请号 |
EP20130166544 |
申请日期 |
2013.05.03 |
申请人 |
KASPERSKY LAB, ZAO |
发明人 |
TATARINOV, IVAN I.;MARTYNENKO, VLADISLAV V.;MONASTYRSKY, ALEXEY V.;PAVLYUSHCHIK, MIKHAIL;SAPRONOV, KONSTANTIN V.;SLOBODYANUK, YURI G. |
分类号 |
G06F21/55;G06F21/56 |
主分类号 |
G06F21/55 |
代理机构 |
|
代理人 |
|
主权项 |
|
地址 |
|