Method and apparatus for identifying invariants to detect software tampering
US8108931B1 · kind B1 · utility
Assignee
Inventors
Key dates
| Filing date | Mar 31, 2008 |
| Grant date | Jan 31, 2012 |
| Priority date | — |
| Expiry date | Jun 19, 2030 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F21/14
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
Various embodiments of a method and an apparatus for identifying invariants to detect software tampering is disclosed. In one embodiment, a method of identifying invariants associated with a software package comprises applying a machine learning technique to a plurality of images associated with a software package to identify a memory location within the plurality of images to be a candidate invariant, wherein the plurality of images comprises images of memory used during execution of the software package and determining an invariant based on the candidate invariant.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.