Patent · US Expired

Automatic detection and patching of vulnerable files

US7424706B2 · kind B2 · utility

57Cited by
9References
24Claims
0Family size

Assignee

Inventors

Key dates

Filing dateJul 16, 2003
Grant dateSep 9, 2008
Priority date
Expiry dateNov 12, 2024

Classification

  • Technology area (CPC G)Physics
  • CPC primaryG06F8/65
  • WIPO fieldComputer technology
  • WIPO sectorElectrical engineering

Abstract

Systems and methods are described that enable patching of security vulnerabilities in binary files. The detection and patching of vulnerable binary files is automatic, reliable, regression free, and comprehensive across networks on an unlimited scale. These advantages can be realized in various ways including, for example, by leveraging current anti-virus infrastructure that is widely deployed across the Internet. Reliable discovery of vulnerable binary files (e.g., in operating systems, application programs, etc.) is achieved through the use of binary signatures that have been associated with discovered security vulnerabilities. A divergence of security patches away from conventional service packs provides for the possibility of production of regression-free fixes for security vulnerabilities in binary files.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.