The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Dec. 30, 2025

Filed:

Dec. 12, 2023
Applicant:

Trend Micro Incorporated, Tokyo, JP;

Inventors:

Wen-Tsung Hu, Taipei, TW;

Chieh-Teng Wang, Taipei, TW;

Yi-Da Huang, Taipei, TW;

Chih-Jung Su, Taipei, TW;

Assignee:
Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/56 (2013.01); G06F 3/12 (2006.01); G06F 9/4401 (2018.01); G06F 13/10 (2006.01); G06F 21/55 (2013.01);
U.S. Cl.
CPC ...
G06F 21/566 (2013.01); G06F 21/554 (2013.01); G06F 3/1225 (2013.01); G06F 9/4411 (2013.01); G06F 13/105 (2013.01); G06F 2221/034 (2013.01);
Abstract

Bring Your Own Vulnerable Driver (BYOVD) attacks are detected in Windows-based desktop computers. An opening of a device handle to a device object by a process is detected in the desktop computer. An object path that is used in the opening of the device handle is obtained and parsed to identify a device name of the device object. The device name is compared to device names associated with drivers that have known vulnerabilities. The process that opened the device handle is detected as indicative of a BYOVD attack if the device name is associated with a driver that has a known vulnerability and the process is not a normal process.


Find Patent Forward Citations

Loading…