The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Aug. 04, 2015

Filed:

Sep. 27, 2013
Applicant:

Kaspersky Lab Zao, Moscow, RU;

Inventors:

Victor V. Yablokov, Moscow, RU;

Evgeny Y. Eliseev, Moscow, RU;

Assignee:

Kaspersky Lab ZAO, Moscow, RU;

Attorneys:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/53 (2013.01); G06F 21/56 (2013.01);
U.S. Cl.
CPC ...
G06F 21/53 (2013.01); G06F 21/566 (2013.01); G06F 2221/2149 (2013.01);
Abstract

Disclosed system and methods for detecting malicious applications. The system provides a library of handler functions. The handlers functions control access of one or more applications to protected resources on a user device. The system also modifies the one or more applications to access the library of handler functions instead of corresponding application program interface (API) functions of the user device. The handler functions receive API function calls from a modified application. The system analyzes the received API function calls for malicious behavior characteristics. When the API function calls do not exhibit malicious behavior characteristics, the handler functions perform the API function calls to the protected resources. When the API function calls exhibit malicious behavior characteristics, the system prevents access of the modified application to the protected resources.


Find Patent Forward Citations

Loading…