The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
May. 03, 2011
Filed:
May. 01, 2008
Peter Szor, Northridge, CA (US);
Peter Szor, Northridge, CA (US);
Symantec Corporation, Mountain View, CA (US);
Abstract
The executions of computer viruses are analyzed to develop register signatures for the viruses. The register signatures specify the sets of outputs the viruses produce when executed with a given set of inputs. A virus detection system (VDS) () holds a database () of the register signatures. The VDS () selects () a file that might contain a computer virus and identifies potential entry points in the file. The VDS () uses a virtual machine () having an initial state to emulate () a relatively small number of instructions at each entry point. While emulating each potential entry point, the VDS builds () a register table that tracks the state of a subset of the virtual registers (). Once the VDS () reaches an emulation breakpoint, it analyzes the register table in view of the register signatures to determine whether the file contains a virus.