Industrial Technology Research Institute

Pan-Jo Chuang

Tzi-Cker Chiueh

Li-Ting Huang

Chuan-Yu Cho

Tzy-Shiah Wang

Lap Chung Lam

Lap-Chung Lam

A detection system for determining whether an update of at least one application installed on at least one whitelisted host is legitimate is provided. The system includes an update management server and update detectors installed with the application(s). During a process that software automatic update occurs in each update detector and a corresponding update installation package is executed, the executed update installation package generates at least one updater corresponding to each application. Each update detector transmits report information which includes the information of the at least one updater and sampled executable files to the update management server. The update management server obtains a number of update detectors, having performed the update operation of each application, according to the report information of each update detector. If the number is greater than or equal to a threshold value, it is determined that the update is legitimate.

Detection system, detection method, and an update verification method performed by using the detection method

A method for preventing malicious software from attacking files of a computer system includes the following steps. Whether a file type of a specific file corresponding to an input/output (I/O) request is a to-be-backed-up file type is checked, wherein the to-be-backed-up file type belongs to one of multiple predetermined file types susceptible to malicious software attack. When the file type of the specific file is the to-be-backed-up file type, a backup already tag in a file context tag structure of the specific file is checked. When the backup already tag shows that the specific file has not been backed up, a backup process is performed for the specific file.

Method and computer system for preventing malicious software from attacking files of the computer system and corresponding non-transitory computer readable storage medium

Growing community of inventors

Kaohsiung, Taiwan

Pan-Jo Chuang