Malware detection using external call characteristics
US8171551B2 · kind B2 · utility
19Cited by
13References
21Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Apr 1, 2003 |
| Grant date | May 1, 2012 |
| Priority date | — |
| Expiry date | Jun 26, 2028 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F21/564
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
A malware scanner 2, for malware such as computer viruses, worms, Trojans and the like, utilizes the external call characteristics associated with known items of malware to identify the presence of malware within a computer file. Malware written in a high level language when compiled can take a variety of different forms as object code, but these different object code forms will usually share external call characteristics to a sufficient degree to allow the presence of such external call characteristics to properly and accurately generically identify different compiled variants of the source code malware.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.