System and method for below-operating system trapping and securing of interdriver communication

Patent metadata

Field	Value
Publication number	US-8959638-B2
Application number	US-201113075072-A
Country	US
Kind code	B2
Filing date	Mar 29, 2011
Priority date	Mar 29, 2011
Publication date	Feb 17, 2015
Grant date	Feb 17, 2015

Abstract

In one embodiment, a system for protecting an electronic device against malware includes a memory, an operating system configured to execute on the electronic device, and a below-operating-system security agent. The below-operating-system security agent is configured to trap an attempted access by a first driver of the operating system of a second driver of the electronic device, access one or more security rules to determine whether the attempted access is indicative of malware, and operate at a level below all of the operating systems of the electronic device accessing the second driver.

First claim

What is claimed is:

1. A system for protecting an electronic device against malware, comprising:
a memory;
an operating system included in one or more operating systems configured to execute on the electronic device;
a below-operating-system security agent configured to:
trap an attempted access by a first driver of the operating system of a second, different driver of the electronic device, the attempted access including the first driver calling a function of the second driv…

Assignees

• Sallam Ahmed Said
• Mcafee Inc

Inventors

• Sallam Ahmed Said

Classifications

• G06F21/566 Primary

  Physics · mapped topic