SYSTEM FOR USING BEHAVIOURAL ANALYSIS TO DETECT, REMOVE AND INNOCULATE AGAINST ROOTKIT TECHNOLOGY

Fecha de publicación: 20/06/2008
Fuente: WIPO "miel"
A system, and method are disclosed for securing a computing system against malicious activity. In its various embodiments the invention presents more reliable “activity” based detection of malicious code and computing system exploits such as rootkits. The computer security system has a module for anomalous activity at the basic abstraction layer of the computing system. Loading of operating system exploits may be halted based on a defined rule-set to prevent the computing system against malicious activity and exploits.