The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Sep. 05, 2006
Filed:
May. 08, 2002
William C. Arnold, Mahopac, NY (US);
David M. Chess, Mohegan Lake, NY (US);
John F. Morar, Mahopac, NY (US);
Alla Segal, Mount Kisco, NY (US);
Ian N. Whalley, Pawling, NY (US);
Steve R. White, New York, NY (US);
William C. Arnold, Mahopac, NY (US);
David M. Chess, Mohegan Lake, NY (US);
John F. Morar, Mahopac, NY (US);
Alla Segal, Mount Kisco, NY (US);
Ian N. Whalley, Pawling, NY (US);
Steve R. White, New York, NY (US);
International Business Machines Corporation, Armonk, NY (US);
Abstract
Disclosed is a method, a computer system and a computer readable media product that contains a set of computer executable software instructions for directing the computer system to execute a process for determining a non-replicative behavior of a program that is suspected of containing an undesirable software entity. The process causes execution of the program in at least one known environment and automatically examines the at least one known environment to detect if a change has occurred in the environment as a result of the execution of the program. If a change is detected, the process automatically analyzes the detected change (i.e., the process performs a side effects analysis) to determine if the change resulted from execution of the program or from execution of the undesirable software entity. The process then uses the result of the analysis at least for undoing a detected change that results from execution of the undesirable software entity. The result of the analysis can also be used for informing a user of an anti-virus system of the non-replicative changes made to the environment.