The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Dec. 27, 2005
Filed:
Aug. 17, 2000
William C. Arnold, Mahopac, NY (US);
David M. Chess, Mohegan Lake, NY (US);
John F. Morar, Mahopac, NY (US);
Alla Segal, Mount Kisco, NY (US);
Morton G. Swimmer, New York, NY (US);
Ian N. Whalley, Pawling, NY (US);
Steve R. White, New York, NY (US);
William C. Arnold, Mahopac, NY (US);
David M. Chess, Mohegan Lake, NY (US);
John F. Morar, Mahopac, NY (US);
Alla Segal, Mount Kisco, NY (US);
Morton G. Swimmer, New York, NY (US);
Ian N. Whalley, Pawling, NY (US);
Steve R. White, New York, NY (US);
International Business Machines Corporation, Armonk, NY (US);
Abstract
A system and a method are disclosed for dynamically analyzing software, some of whose potentially-important behaviors (such as worm-like behavior) may only be displayed when the software is executed in an environment where it has, or appears to have, access to a production network and/or to the global Internet. The software can be executed in a real or an emulated network environment that includes a monitoring component and an emulation component. The monitoring component serves to capture and/or record the behaviors displayed by the software and/or other components of the system, and the emulation component gives the software being analyzed the impression that it is executing with access to a production network and/or to the global Internet. The software being analyzed is effectively confined to the analysis network environment, and cannot in fact read information from, or alter any information on, any production network or the global Internet.