Malware Discovery Method and System

A process for identifying potentially harmful malware, comprises the steps of: a) identifying an executable that is about to run; b) providing a monitoring agent that monitors all threads that are descendent of a thread initiated by the process of said executable; and c) configuring said monitoring...

Ausführliche Beschreibung

Gespeichert in:

Bibliographische Detailangaben
Hauptverfasser:	GIDEONI, AVNER, DYCIAN, YARON, KLEIN, AMIT, FRISHMAN, GAL
Format:	Patent
Sprache:	eng ; fre ; ger
Schlagworte:	CALCULATING COMPUTING COUNTING ELECTRIC DIGITAL DATA PROCESSING PHYSICS
Online-Zugang:	Volltext bestellen
Tags:	Tag hinzufügen Keine Tags, Fügen Sie den ersten Tag hinzu!

container_end_page
container_issue
container_start_page
container_title
container_volume
creator	GIDEONI, AVNER DYCIAN, YARON KLEIN, AMIT FRISHMAN, GAL
description	A process for identifying potentially harmful malware, comprises the steps of: a) identifying an executable that is about to run; b) providing a monitoring agent that monitors all threads that are descendent of a thread initiated by the process of said executable; and c) configuring said monitoring agent to conclude that a high probability of malware presence exists, if one of said descendent threads reaches a target process in which suspicious patches are created.
format	Patent
fullrecord	<record><control><sourceid>epo_EVB</sourceid><recordid>TN_cdi_epo_espacenet_EP2782040A1</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><sourcerecordid>EP2782040A1</sourcerecordid><originalsourceid>FETCH-epo_espacenet_EP2782040A13</originalsourceid><addsrcrecordid>eNrjZFD2TcwpTyxKVXDJLE7OL0stqlTwTS3JyE9RSMxLUQiuLC5JzeVhYE1LzClO5YXS3AwKbq4hzh66qQX58anFBYnJqXmpJfGuAUbmFkYGJgaOhsZEKAEAfH8lug</addsrcrecordid><sourcetype>Open Access Repository</sourcetype><iscdi>true</iscdi><recordtype>patent</recordtype></control><display><type>patent</type><title>Malware Discovery Method and System</title><source>esp@cenet</source><creator>GIDEONI, AVNER ; DYCIAN, YARON ; KLEIN, AMIT ; FRISHMAN, GAL</creator><creatorcontrib>GIDEONI, AVNER ; DYCIAN, YARON ; KLEIN, AMIT ; FRISHMAN, GAL</creatorcontrib><description>A process for identifying potentially harmful malware, comprises the steps of: a) identifying an executable that is about to run; b) providing a monitoring agent that monitors all threads that are descendent of a thread initiated by the process of said executable; and c) configuring said monitoring agent to conclude that a high probability of malware presence exists, if one of said descendent threads reaches a target process in which suspicious patches are created.</description><language>eng ; fre ; ger</language><subject>CALCULATING ; COMPUTING ; COUNTING ; ELECTRIC DIGITAL DATA PROCESSING ; PHYSICS</subject><creationdate>2014</creationdate><oa>free_for_read</oa><woscitedreferencessubscribed>false</woscitedreferencessubscribed></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><linktohtml>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&date=20140924&DB=EPODOC&CC=EP&NR=2782040A1$$EHTML$$P50$$Gepo$$Hfree_for_read</linktohtml><link.rule.ids>230,308,780,885,25564,76547</link.rule.ids><linktorsrc>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&date=20140924&DB=EPODOC&CC=EP&NR=2782040A1$$EView_record_in_European_Patent_Office$$FView_record_in_$$GEuropean_Patent_Office$$Hfree_for_read</linktorsrc></links><search><creatorcontrib>GIDEONI, AVNER</creatorcontrib><creatorcontrib>DYCIAN, YARON</creatorcontrib><creatorcontrib>KLEIN, AMIT</creatorcontrib><creatorcontrib>FRISHMAN, GAL</creatorcontrib><title>Malware Discovery Method and System</title><description>A process for identifying potentially harmful malware, comprises the steps of: a) identifying an executable that is about to run; b) providing a monitoring agent that monitors all threads that are descendent of a thread initiated by the process of said executable; and c) configuring said monitoring agent to conclude that a high probability of malware presence exists, if one of said descendent threads reaches a target process in which suspicious patches are created.</description><subject>CALCULATING</subject><subject>COMPUTING</subject><subject>COUNTING</subject><subject>ELECTRIC DIGITAL DATA PROCESSING</subject><subject>PHYSICS</subject><fulltext>true</fulltext><rsrctype>patent</rsrctype><creationdate>2014</creationdate><recordtype>patent</recordtype><sourceid>EVB</sourceid><recordid>eNrjZFD2TcwpTyxKVXDJLE7OL0stqlTwTS3JyE9RSMxLUQiuLC5JzeVhYE1LzClO5YXS3AwKbq4hzh66qQX58anFBYnJqXmpJfGuAUbmFkYGJgaOhsZEKAEAfH8lug</recordid><startdate>20140924</startdate><enddate>20140924</enddate><creator>GIDEONI, AVNER</creator><creator>DYCIAN, YARON</creator><creator>KLEIN, AMIT</creator><creator>FRISHMAN, GAL</creator><scope>EVB</scope></search><sort><creationdate>20140924</creationdate><title>Malware Discovery Method and System</title><author>GIDEONI, AVNER ; DYCIAN, YARON ; KLEIN, AMIT ; FRISHMAN, GAL</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-epo_espacenet_EP2782040A13</frbrgroupid><rsrctype>patents</rsrctype><prefilter>patents</prefilter><language>eng ; fre ; ger</language><creationdate>2014</creationdate><topic>CALCULATING</topic><topic>COMPUTING</topic><topic>COUNTING</topic><topic>ELECTRIC DIGITAL DATA PROCESSING</topic><topic>PHYSICS</topic><toplevel>online_resources</toplevel><creatorcontrib>GIDEONI, AVNER</creatorcontrib><creatorcontrib>DYCIAN, YARON</creatorcontrib><creatorcontrib>KLEIN, AMIT</creatorcontrib><creatorcontrib>FRISHMAN, GAL</creatorcontrib><collection>esp@cenet</collection></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext_linktorsrc</fulltext></delivery><addata><au>GIDEONI, AVNER</au><au>DYCIAN, YARON</au><au>KLEIN, AMIT</au><au>FRISHMAN, GAL</au><format>patent</format><genre>patent</genre><ristype>GEN</ristype><title>Malware Discovery Method and System</title><date>2014-09-24</date><risdate>2014</risdate><abstract>A process for identifying potentially harmful malware, comprises the steps of: a) identifying an executable that is about to run; b) providing a monitoring agent that monitors all threads that are descendent of a thread initiated by the process of said executable; and c) configuring said monitoring agent to conclude that a high probability of malware presence exists, if one of said descendent threads reaches a target process in which suspicious patches are created.</abstract><oa>free_for_read</oa></addata></record>
fulltext	fulltext_linktorsrc
identifier
ispartof
issn
language	eng ; fre ; ger
recordid	cdi_epo_espacenet_EP2782040A1
source	esp@cenet
subjects	CALCULATING COMPUTING COUNTING ELECTRIC DIGITAL DATA PROCESSING PHYSICS
title	Malware Discovery Method and System
url	https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2024-12-22T08%3A13%3A37IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-epo_EVB&rft_val_fmt=info:ofi/fmt:kev:mtx:patent&rft.genre=patent&rft.au=GIDEONI,%20AVNER&rft.date=2014-09-24&rft_id=info:doi/&rft_dat=%3Cepo_EVB%3EEP2782040A1%3C/epo_EVB%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_id=info:pmid/&rfr_iscdi=true