Microsoft Patented Malware Detection System

Strategic Insights -

Microsoft has been assigned a patent for a system and method for detecting malware in an executable code module according to the code module's exhibited behavior. The patent, developed by Daniel M. Bodorin and Adrian M. Marinescu, utilizes a behavior evaluation module to execute the code module and record its behavior signature. This signature is then compared against known malware behavior signatures stored in a malware behavior signature store to determine whether the code module is malware. The patent application was filed on January 30, 2004, and the patent was published on March 22, 2011.

Key Takeaways:

  • The patented system determines the type of code module and executes it in a behavior evaluation module to evaluate its code.
  • The behavior signature of the code module is recorded and compared against known malware behavior signatures stored in a malware behavior signature store.
  • The system is designed to detect malware in an executable code module based on its exhibited behavior.
  • The patent application was filed by Daniel M. Bodorin and Adrian M. Marinescu on January 30, 2004.
  • The patent was published on March 22, 2011, as patent number 7,913,305.
  • The system is presented as a malware detection system that determines whether an executable code module is malware according to its behaviors exhibited while executing.

Statistics:

  • The patent application was filed on January 30, 2004.
  • The patent was published on March 22, 2011.
  • The patent number is 7,913,305.
  • The patent was developed by Daniel M. Bodorin and Adrian M. Marinescu.

Sources:

  • U.S. Patent and Trademark Office
  • http://patft.uspto.gov/netacgi/nph-Parser?Sect1=PTO2&Sect2=HITOFF&p=1&u=%2Fnetahtml%2FPTO%2Fsearch-bool.html&r=8&f=G&l=50&co1=AND&d=PTXT&s1=20110322.PD.&s2=%28wa.ASST.%29&OS=ISD/03/22/2011+AND+AS/wa&RS=ISD/03/22/2011+AND+AS/wa