Systems and methods for event-based application control
US11556634B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Jun 15, 2020 |
| Grant date | Jan 17, 2023 |
| Priority date | — |
| Expiry date | Apr 24, 2041 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F2221/2101
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
Systems and methods are disclosed for event-based application control. A system extension is configured to leverage an endpoint security API for monitoring event activity within operating system kernel processes. The system extension registers with the endpoint security API particular event types for which the system extension would like to receive notifications. In response to receiving notifications regarding detected events corresponding to the registered event types, the system extension determines if the event, and its corresponding process, are safe and allowable to execute. In various embodiments, the system leverages whitelists, blacklists, and rules policies for making a safeness determination regarding the event notification. The system extension transmits this determination to the operating system via the endpoint security API.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.