The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Patent No.:

US 7631356 B1

PDF
Full Text
Expired
Date of Patent:
Dec. 08, 2009

Filed:

Apr. 08, 2005
Applicants:

Kristjan R. Hatlelid, Sammamish, WA (US);

Uri London, Redmond, WA (US);

Vladimir A. Shubin, North Bend, WA (US);

Inventors:

Kristjan R. Hatlelid, Sammamish, WA (US);

Uri London, Redmond, WA (US);

Vladimir A. Shubin, North Bend, WA (US);

Assignee:

Microsoft Corporation, Redmond, WA (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06F 21/00 (2006.01);
U.S. Cl.
CPC ...
Abstract

A method and system for efficient foreign code detection is presented. In one aspect of the invention, an authentication module examines pages which are referenced by thread stacks in a process space, where the pages may contain foreign code. The module can walk up the thread stacks to examine return address that reference such pages. In another aspect, the module checks random pages referenced by the stack. In yet another aspect, the module checks any nearby suspicious pages to checked pages referenced by the stack. Additionally, the module checks the instruction pointer referenced page, the pages and calling code described by the page fault history, and any pages with event handling functions, dynamic link library functions, or other functions that are likely to run.


Find Patent Forward Citations

Hatlelid, Kristjan. (2009). System and method for foreign code detection (U.S. Patent No. 7631356). U.S. Patent and Trademark Office. https://idiyas.com/patent/badge/7631356

Data source: USPTO (United States Patent and Trademark Office) public patent records. Weekly synchronization. How IDiyas builds this profile

Loading…