发明名称 Emulation for malware detection
摘要 According to a first aspect of the present invention there is provided a method of performing emulation of at least part of a program using an emulated computer system implemented on a computer system. The method comprises includes, during execution of the program within the emulated computer system, when the program attempts to access a unit of data, copying the unit of data from a memory of the computer system into an emulated memory, and allowing the program to access the unit of data within emulated computer system. A unit of data may be a memory page.
申请公布号 US2012266243(A1) 申请公布日期 2012.10.18
申请号 US201113066399 申请日期 2011.04.14
申请人 F-SECURE CORPORATION 发明人 TURKULAINEN JARKKO
分类号 G06F9/455;G06F21/00 主分类号 G06F9/455
代理机构 代理人
主权项
地址