Detecting new or modified portions of code
US8443354B1 · kind B1 · utility
31Cited by
11References
20Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Mar 29, 2006 |
| Grant date | May 14, 2013 |
| Priority date | — |
| Expiry date | Jul 30, 2030 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F9/44536
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
Detecting new or modified portions of executable code is disclosed. An indication is received that a prior version of an executable file has been replaced by a new version. A security response is provided if a process associated with the executable file attempts to perform a restricted action and a new or changed portion of code comprising the new version has executed. If no new or changed portion of code has executed, the restricted action is allowed to an extent determined previously for the prior version of the executable file.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.