METHODE UND VORRICHTUNG ZUM BESTIMMEN VON POTENZIELLEM WURM-ÄHNLICHEN VERHALTEN EINES PROGRAMMES

METHODE UND VORRICHTUNG ZUM BESTIMMEN VON POTENZIELLEM WURM-ÄHNLICHEN VERHALTEN EINES PROGRAMMES

A method and system for the automatic determination of the behavioral profile of a program suspected of having worm-like characteristics includes analyzing data processing system resources required by the program and, if the required resources are not indicative of the program having worm-like chara...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: MORAR, JOHN FREDERICK, CHESS, DAVID MICHAEL, ARNOLD, WILLIAM, WHALLEY, IAN NICHOLAS, WHITE, STEVE RICHARD, SEGAL, ALLA
Format: Patent
Sprache:ger
Schlagworte:
CALCULATING
COMPUTING
COUNTING
ELECTRIC DIGITAL DATA PROCESSING
PHYSICS
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
container_end_page
container_issue
container_start_page
container_title
container_volume
creator MORAR, JOHN FREDERICK
CHESS, DAVID MICHAEL
ARNOLD, WILLIAM
WHALLEY, IAN NICHOLAS
WHITE, STEVE RICHARD
SEGAL, ALLA
description A method and system for the automatic determination of the behavioral profile of a program suspected of having worm-like characteristics includes analyzing data processing system resources required by the program and, if the required resources are not indicative of the program having worm-like characteristics, running the program in a controlled non-network environment while monitoring and logging accesses to system resources to determine the behavior of the program in the non-network environment. A logged record of the observed behavior is analyzed to determine if the behavior is indicative of the program having worm-like characteristics. The non-network environment may simulate the appearance of a network to the program, without emulating the operation of the network.
format Patent
fullrecord <record><control><sourceid>epo_EVB</sourceid><recordid>TN_cdi_epo_espacenet_DE60311666TT2</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><sourcerecordid>DE60311666TT2</sourcerecordid><originalsourceid>FETCH-epo_espacenet_DE60311666TT23</originalsourceid><addsrcrecordid>eNqNy0EKwjAQheFuXIh6h8F9wVrIvjZjE0gmJZ0odFOKxJVooR7Bm3kxI3gAV2_xvn-ZjRZZOYkQSMLJea9rxYEa6IOFA3asrUVKD0HrGKnXaAxaOAdv8_dLkUnBF6BXlUkAUBN20HrX-Cq13TpbXMfbHDe_XWXbI3Kt8jg9hjhP4yXe43OQKHZlUQghmPflX-gD3FA12w</addsrcrecordid><sourcetype>Open Access Repository</sourcetype><iscdi>true</iscdi><recordtype>patent</recordtype></control><display><type>patent</type><title>METHODE UND VORRICHTUNG ZUM BESTIMMEN VON POTENZIELLEM WURM-ÄHNLICHEN VERHALTEN EINES PROGRAMMES</title><source>esp@cenet</source><creator>MORAR, JOHN FREDERICK ; CHESS, DAVID MICHAEL ; ARNOLD, WILLIAM ; WHALLEY, IAN NICHOLAS ; WHITE, STEVE RICHARD ; SEGAL, ALLA</creator><creatorcontrib>MORAR, JOHN FREDERICK ; CHESS, DAVID MICHAEL ; ARNOLD, WILLIAM ; WHALLEY, IAN NICHOLAS ; WHITE, STEVE RICHARD ; SEGAL, ALLA</creatorcontrib><description>A method and system for the automatic determination of the behavioral profile of a program suspected of having worm-like characteristics includes analyzing data processing system resources required by the program and, if the required resources are not indicative of the program having worm-like characteristics, running the program in a controlled non-network environment while monitoring and logging accesses to system resources to determine the behavior of the program in the non-network environment. A logged record of the observed behavior is analyzed to determine if the behavior is indicative of the program having worm-like characteristics. The non-network environment may simulate the appearance of a network to the program, without emulating the operation of the network.</description><language>ger</language><subject>CALCULATING ; COMPUTING ; COUNTING ; ELECTRIC DIGITAL DATA PROCESSING ; PHYSICS</subject><creationdate>2007</creationdate><oa>free_for_read</oa><woscitedreferencessubscribed>false</woscitedreferencessubscribed></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><linktohtml>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&amp;date=20071122&amp;DB=EPODOC&amp;CC=DE&amp;NR=60311666T2$$EHTML$$P50$$Gepo$$Hfree_for_read</linktohtml><link.rule.ids>230,308,780,885,25562,76317</link.rule.ids><linktorsrc>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&amp;date=20071122&amp;DB=EPODOC&amp;CC=DE&amp;NR=60311666T2$$EView_record_in_European_Patent_Office$$FView_record_in_$$GEuropean_Patent_Office$$Hfree_for_read</linktorsrc></links><search><creatorcontrib>MORAR, JOHN FREDERICK</creatorcontrib><creatorcontrib>CHESS, DAVID MICHAEL</creatorcontrib><creatorcontrib>ARNOLD, WILLIAM</creatorcontrib><creatorcontrib>WHALLEY, IAN NICHOLAS</creatorcontrib><creatorcontrib>WHITE, STEVE RICHARD</creatorcontrib><creatorcontrib>SEGAL, ALLA</creatorcontrib><title>METHODE UND VORRICHTUNG ZUM BESTIMMEN VON POTENZIELLEM WURM-ÄHNLICHEN VERHALTEN EINES PROGRAMMES</title><description>A method and system for the automatic determination of the behavioral profile of a program suspected of having worm-like characteristics includes analyzing data processing system resources required by the program and, if the required resources are not indicative of the program having worm-like characteristics, running the program in a controlled non-network environment while monitoring and logging accesses to system resources to determine the behavior of the program in the non-network environment. A logged record of the observed behavior is analyzed to determine if the behavior is indicative of the program having worm-like characteristics. The non-network environment may simulate the appearance of a network to the program, without emulating the operation of the network.</description><subject>CALCULATING</subject><subject>COMPUTING</subject><subject>COUNTING</subject><subject>ELECTRIC DIGITAL DATA PROCESSING</subject><subject>PHYSICS</subject><fulltext>true</fulltext><rsrctype>patent</rsrctype><creationdate>2007</creationdate><recordtype>patent</recordtype><sourceid>EVB</sourceid><recordid>eNqNy0EKwjAQheFuXIh6h8F9wVrIvjZjE0gmJZ0odFOKxJVooR7Bm3kxI3gAV2_xvn-ZjRZZOYkQSMLJea9rxYEa6IOFA3asrUVKD0HrGKnXaAxaOAdv8_dLkUnBF6BXlUkAUBN20HrX-Cq13TpbXMfbHDe_XWXbI3Kt8jg9hjhP4yXe43OQKHZlUQghmPflX-gD3FA12w</recordid><startdate>20071122</startdate><enddate>20071122</enddate><creator>MORAR, JOHN FREDERICK</creator><creator>CHESS, DAVID MICHAEL</creator><creator>ARNOLD, WILLIAM</creator><creator>WHALLEY, IAN NICHOLAS</creator><creator>WHITE, STEVE RICHARD</creator><creator>SEGAL, ALLA</creator><scope>EVB</scope></search><sort><creationdate>20071122</creationdate><title>METHODE UND VORRICHTUNG ZUM BESTIMMEN VON POTENZIELLEM WURM-ÄHNLICHEN VERHALTEN EINES PROGRAMMES</title><author>MORAR, JOHN FREDERICK ; CHESS, DAVID MICHAEL ; ARNOLD, WILLIAM ; WHALLEY, IAN NICHOLAS ; WHITE, STEVE RICHARD ; SEGAL, ALLA</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-epo_espacenet_DE60311666TT23</frbrgroupid><rsrctype>patents</rsrctype><prefilter>patents</prefilter><language>ger</language><creationdate>2007</creationdate><topic>CALCULATING</topic><topic>COMPUTING</topic><topic>COUNTING</topic><topic>ELECTRIC DIGITAL DATA PROCESSING</topic><topic>PHYSICS</topic><toplevel>online_resources</toplevel><creatorcontrib>MORAR, JOHN FREDERICK</creatorcontrib><creatorcontrib>CHESS, DAVID MICHAEL</creatorcontrib><creatorcontrib>ARNOLD, WILLIAM</creatorcontrib><creatorcontrib>WHALLEY, IAN NICHOLAS</creatorcontrib><creatorcontrib>WHITE, STEVE RICHARD</creatorcontrib><creatorcontrib>SEGAL, ALLA</creatorcontrib><collection>esp@cenet</collection></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext_linktorsrc</fulltext></delivery><addata><au>MORAR, JOHN FREDERICK</au><au>CHESS, DAVID MICHAEL</au><au>ARNOLD, WILLIAM</au><au>WHALLEY, IAN NICHOLAS</au><au>WHITE, STEVE RICHARD</au><au>SEGAL, ALLA</au><format>patent</format><genre>patent</genre><ristype>GEN</ristype><title>METHODE UND VORRICHTUNG ZUM BESTIMMEN VON POTENZIELLEM WURM-ÄHNLICHEN VERHALTEN EINES PROGRAMMES</title><date>2007-11-22</date><risdate>2007</risdate><abstract>A method and system for the automatic determination of the behavioral profile of a program suspected of having worm-like characteristics includes analyzing data processing system resources required by the program and, if the required resources are not indicative of the program having worm-like characteristics, running the program in a controlled non-network environment while monitoring and logging accesses to system resources to determine the behavior of the program in the non-network environment. A logged record of the observed behavior is analyzed to determine if the behavior is indicative of the program having worm-like characteristics. The non-network environment may simulate the appearance of a network to the program, without emulating the operation of the network.</abstract><oa>free_for_read</oa></addata></record>
fulltext fulltext_linktorsrc
identifier
ispartof
issn
language ger
recordid cdi_epo_espacenet_DE60311666TT2
source esp@cenet
subjects CALCULATING
COMPUTING
COUNTING
ELECTRIC DIGITAL DATA PROCESSING
PHYSICS
title METHODE UND VORRICHTUNG ZUM BESTIMMEN VON POTENZIELLEM WURM-ÄHNLICHEN VERHALTEN EINES PROGRAMMES
url https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2025-01-13T20%3A29%3A21IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-epo_EVB&rft_val_fmt=info:ofi/fmt:kev:mtx:patent&rft.genre=patent&rft.au=MORAR,%20JOHN%20FREDERICK&rft.date=2007-11-22&rft_id=info:doi/&rft_dat=%3Cepo_EVB%3EDE60311666TT2%3C/epo_EVB%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_id=info:pmid/&rfr_iscdi=true