The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Oct. 11, 2011

Filed:

Mar. 19, 2008
Applicants:

Tzi-cker Chiueh, Setauket, NY (US);

Kent “e” Griffin, Santa Monica, CA (US);

Inventors:

Tzi-cker Chiueh, Setauket, NY (US);

Kent “E” Griffin, Santa Monica, CA (US);

Assignee:

Symantec Corporation, Mountian View, CA (US);

Attorneys:
Primary Examiner:
Int. Cl.
CPC ...
G06F 12/14 (2006.01); G06F 17/30 (2006.01);
U.S. Cl.
CPC ...
Abstract

A computer-implemented method includes identifying a buffer overflow vulnerability in a vulnerable program including identifying a victim buffer creation site that created a victim buffer and identifying a vulnerability site that overflowed the victim buffer. A patch is created for the vulnerable program to prevent the vulnerability site from overflowing a potential victim buffer created by the victim buffer creation site. In this manner, the information obtained in identifying the buffer overflow vulnerability is used to automatically derive a patch that accurately seals the vulnerability, greatly reduces the false positive and negative rate, while at the same time shortens the response time to new threats.


Find Patent Forward Citations

Loading…