System and method for below-operating system trapping and securing loading of code into memory

Patent metadata

Field	Value
Publication number	US-9038176-B2
Application number	US-201113076480-A
Country	US
Kind code	B2
Filing date	Mar 31, 2011
Priority date	Mar 31, 2011
Publication date	May 19, 2015
Grant date	May 19, 2015

Abstract

A system for protecting an electronic device against malware includes a memory, an operating system configured to execute on the electronic device, and a below-operating-system security agent. The below-operating-system security agent is configured to trap an attempted access of a resource of the electronic device, access one or more security rules to determine whether the attempted access is indicative of malware, and operate at a level below all of the operating systems of the electronic device accessing the memory. The attempted access includes attempting to write instructions to the memory and attempting to execute the instructions.

First claim

What is claimed is:

1. A system for protecting an electronic device against malware, comprising:
a memory;
one or more operating systems an operating system configured to execute on the electronic device;
a below operating-system security agent configured to:
identify an attempted access of a resource of the electronic device, the attempted access comprising:
attempting to write instructions to the memory; and
attempting to execute the instructions;

trap the attempted…

Assignees

• Sallam Ahmed Said
• Mcafee Inc

Inventors

• Sallam Ahmed Said

Classifications

• G06F21/554

  Physics · mapped topic

• G06F9/45558

  Physics · mapped topic

• G06F21/566 Primary

  Physics · mapped topic

• G06F21/52

  Physics · mapped topic

• G06F2221/033

  Physics · mapped topic