Dynamic heuristic method for detecting computer viruses using decryption exploration and evaluation phases

Number of patents in Portfolio can not be more than 2000

United States of America Patent

PATENT NO 6357008
SERIAL NO

08935577

Stats

ATTORNEY / AGENT: (SPONSORED)

Importance

Loading Importance Indicators... loading....

Abstract

See full text

A method for detecting computer viruses comprising three phases: a decryption phase, an exploration phase, and an evaluation phase. A purpose of the decryption phase is to emulate a sufficient number of instructions to allow an encrypted virus to decrypt its viral body. A purpose of the exploration phase is to emulate at least once all sections of code within a region deemed likely to contain any virus present in the target program. A purpose of the evaluation phase is to analyze any suspicious behavior observed during the decryption and exploration phases to determine whether the target appears to be infected.

Loading the Abstract Image... loading....

First Claim

See full text

Family

Loading Family data... loading....

Patent Owner(s)

Patent OwnerAddress
SYMANTEC CORPORATION350 ELLIS STREET MOUNTAIN VIEW CA 94043

International Classification(s)

  • [Classification Symbol]
  • [Patents Count]

Inventor(s)

Inventor Name Address # of filed Patents Total Citations
Nachenberg, Carey S Northridge, CA 53 3563

Cited Art Landscape

Load Citation

Patent Citation Ranking

Forward Cite Landscape

Load Citation