Memory whitelisting
US9104872B2 · kind B2 · utility
2Cited by
1References
18Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Jan 28, 2010 |
| Grant date | Aug 11, 2015 |
| Priority date | — |
| Expiry date | Jul 21, 2032 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F21/566
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
An enhanced whitelisting module associated within a system whitelists unknown files for execution on the system. The whitelisting module may oversee the computation of a hash of a file loaded into the memory and comparison of the hash to hashes within a hash table generated from clean files located on a clean system. The whitelisting module may communicate to a device internal and/or external to the system to retrieve the hash table of clean files. In certain embodiments, a rolling hash (or other piecewise hash) may be used to determine the location and/or extent of the differences between a modified file and a clean file.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.