The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Mar. 30, 2021

Filed:

Jun. 11, 2019
Applicant:

Sophos Limited, Abingdon, GB;

Inventors:

Mark David Harris, Oxon, GB;

Andrew G. P. Smith, Oxford, GB;

Richard Paul Cosgrove, Abingdon, GB;

Assignee:

Sophos Limited, Abingdon, GB;

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/56 (2013.01); G06F 21/57 (2013.01); G06F 9/54 (2006.01);
U.S. Cl.
CPC ...
G06F 21/566 (2013.01); G06F 9/545 (2013.01); G06F 21/561 (2013.01); G06F 21/565 (2013.01); G06F 21/575 (2013.01);
Abstract

A security driver loads early in the boot process for a compute instance and detects processes that are subsequently launched and/or terminated. The detected processes can be recorded, and then scanned with any suitable malware scanning tool(s) once a user mode is available on the compute instance, including any processes that are terminated before such scanning tools are launched. After the operating system is installed and a user mode is available, other scanning tools may also be deployed (e.g., in the user mode) to augment security of the compute instance.


Find Patent Forward Citations

Loading…