Protecting embedded devices with integrated reset detection

• US 20050216762A1
• Filed: 03/24/2005
• Published: 09/29/2005
• Est. Priority Date: 03/25/2004
• Status: Abandoned Application

• Current Assignee: Cyrus Peikari
• Original Assignee: Cyrus Peikari
• Inventors: Peikari, Cyrus
• Application Number:
  US11/089,391
• Publication Number:
  US 20050216762A1
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements

Abstract

A system for optimizing the security of embedded, mobile devices such as personal data assistants and Smartphones by protecting against soft and hard reset code attacks. In a preferred embodiment, this is achieved by 1. Scanning the active memory for evidence of “hard reset attack” code. 2. Scanning the filesystem for evidence of “hard reset attack” code. 3. Scanning the active memory for evidence of “soft reset attack” code. 4. Scanning the filesystem for evidence of “soft reset attack” code. 5. Automatically blocking and cleaning the reset code, based on user preference. 6. Providing optional user control over which programs are allowed to write to the startup folder.

Claims

1. A method for protecting a data processing system against malicious code, comprising the steps of:

A. scanning an active memory for evidence of a hard reset code;

B. scanning a filesystem for evidence of a hard rest code;

C. scanning said active memory for evidence of a soft reset code;

D. scanning said filesystem for evidence of a soft reset code;

wherein, if any evidence of reset code is discovered during the scanning operations of steps a through d;

E. blocking and cleaning the reset code.

2. The method of claim 1, wherein steps A through D are repeated continuously.

3. The method of claim 1, wherein step E is performed automatically.

4. The method of claim 1, wherein step E is performed in response to a user selection.

5. The method of claim 1, wherein the user is provided with optional control over which programs are allowed to write to a startup folder.

6. The method of claim 1, wherein the data processing system is incorporated onto a personal data assistant.

7. A method for protecting against malicious code, comprising the steps of:

A. scanning an active memory for evidence of a hard reset code;

B. scanning a filesystem for evidence of a hard rest code;

wherein, if any evidence of reset code is discovered during the scanning operations of steps A and B;

C. blocking and cleaning the reset code.

8. The method of claim 7, wherein steps A and B are repeated continuously.

9. The method of claim 7, wherein step C is performed automatically.

10. The method of claim 7, wherein step C is performed in response to a user selection.

11. The method of claim 7, wherein the user is provided with optional control over which programs are allowed to write to a startup folder.

12. The method of claim 7, further comprising:

D. scanning said active memory for evidence of a soft reset code; and

E. scanning said filesystem for evidence of a soft reset code.

13. A method for protecting against malicious code, comprising the steps of:

A. scanning an active memory for evidence of a soft reset code;

B. scanning an filesystem for evidence of a soft reset code;

wherein, if any evidence of reset code is discovered during the scanning operations of steps A and B;

C. blocking and cleaning the reset code.

14. The method of claim 13, wherein steps A and B are repeated continuously.

15. The method of claim 13, wherein step C is performed automatically.

16. The method of claim 13, wherein step C is performed in response to a user selection.

17. The method of claim 13, wherein the user is provided with optional control over which programs are allowed to write to a startup folder.

18. The method of claim 13, further comprising:

D. scanning said active memory for evidence of a hard reset code; and

E. scanning said filesystem for evidence of a hard rest code.

19. An apparatus for protecting a data processing system against malicious code, comprising:

a. means for scanning an active memory for evidence of a hard reset code;

b. means for scanning a filesystem for evidence of a hard rest code;

c. means for scanning said active memory for evidence of a soft reset code;

d. means for scanning said filesystem for evidence of a soft reset code;

e. means for blocking and cleaning any reset code.

20. The apparatus of claim 19, further comprising an embedded, mobile device.