The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Sep. 21, 2010
Filed:
Apr. 09, 2007
Jason Geffner, Bothell, WA (US);
Ning Sun, Bellevue, WA (US);
Brad Albrecht, Snohomish, WA (US);
Tony Lee, Sammamish, WA (US);
Pat Winkler, Redmond, WA (US);
Chengyun Chu, Redmond, WA (US);
Jason Geffner, Bothell, WA (US);
Ning Sun, Bellevue, WA (US);
Brad Albrecht, Snohomish, WA (US);
Tony Lee, Sammamish, WA (US);
Pat Winkler, Redmond, WA (US);
Chengyun Chu, Redmond, WA (US);
Microsoft Corporation, Redmond, WA (US);
Abstract
A binary function database system is provided in which binary functions are extracted from compiled and linked program files and stored in a database as robust abstractions which can be matched with others using one or more function matching heuristics. Such abstraction allows for minor variations in function implementation while still enabling matching with an identical stored function in the database, or with a stored function with a given level of confidence. Metadata associated with each function is also typically generated and stored in the database. In an illustrative example, a structured query language database is utilized that runs on a central database server, and that tracks function names, the program file from which the function is extracted, comments and other associated information as metadata during an analyst's live analysis session to enable known function information that is stored in the database to be applied to binary functions of interest that are disassembled from the program file.