发明名称 Functional patching/hooking detection and prevention
摘要 A method for preventing malicious attacks on software, using the patching method, includes providing a database of legitimate and known patches, the database contains characteristic code paths of said legitimate patches. The method also includes detecting whether a patch is malicious by inspecting one or more characteristic paths of the patch and matching one or more code paths against the database of legitimate and known patches. An activity needed to prevent the malicious patch from performing undesired activities is then performed.
申请公布号 US8239940(B2) 申请公布日期 2012.08.07
申请号 US20090537893 申请日期 2009.08.07
申请人 KLEIN AMIT;IZMERLY OLEG;REGEV SHMUEL;BEN-HAIM ELDAN;TRUSTEER LTD. 发明人 KLEIN AMIT;IZMERLY OLEG;REGEV SHMUEL;BEN-HAIM ELDAN
分类号 G06F11/00 主分类号 G06F11/00
代理机构 代理人
主权项
地址