The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Jan. 28, 2020
Filed:
Sep. 25, 2017
AO Kaspersky Lab, Moscow, RU;
Vladislav V. Pintiysky, Moscow, RU;
Denis V. Anikin, Moscow, RU;
Denis Y. Kobychev, Moscow, RU;
Maxim Y. Golovkin, Moscow, RU;
Vitaly V. Butuzov, Moscow, RU;
Dmitry V. Karasovsky, Moscow, RU;
Dmitry A. Kirsanov, Moscow, RU;
AO KASPERSKY LAB, Moscow, RU;
Abstract
Disclosed are systems and methods for generating a log for conducting an antivirus scan of a file. The described technique includes opening a file in a virtual machine, which causes execution of a guest process and a thread in a (virtual) processor of the virtual machine. The technique includes identifying, during execution of the first thread, events that involve alteration of guest physical memory pages of the virtual machine. The technique determines altered guest physical memory page based on analysis of the log and identifies when a transfer of control to altered guest physical memory pages has occurred. The resultant log for analysis by a security application includes information indicating the events occurring during execution of the thread in the altered guest physical memory page, and context data of the virtual processor on which the thread is being executed.