| 摘要 |
Systems and methods for disrupting the operational capabilities and the distribution capabilities of computer viruses are provided. According to one embodiment, an execution environment is created that makes a computer system appear unique to incoming viruses. Responsive to installation of a valid program, the program is registered for execution by transforming it from an executable form into a locally unique form based on a diversity mechanism. Responsive to detecting an attempted execution of a program and prior to execution of the program, it is transformed by causing a protected pre-execution process of the computer system, which implements the diversity mechanism in the form of an inverse transform, to be applied. If the program was previously validly registered, then the transformation based on the diversity mechanism results in an executable program that will execute properly on the computer system; otherwise the transformation results in an executable program that will fail to correctly execute.
|
