Verisign, Inc.

Bruce Michael Ligh

Ralph Thomas

A method of detecting malicious software (malware) includes receiving a file and storing a memory baseline for a system. The method also includes copying the file to the system, executing the file on the system, terminating operation of the system, and storing a post-execution memory map. The method further includes analyzing the memory baseline and the post-execution memory map and determining that the file includes malware.

Growing community of inventors

Houston, TX, United States of America

Bruce Michael Ligh