Method and system for detecting malware
First Claim
Patent Images
1. A method for protecting objects in a system comprising a backup including backup copies of the objects, the method comprising:
- determining a pattern associated with an object, using at least one backup copy of the object; and
detecting a deviation from the pattern to identify an anomaly indicating that the object is infected by malware.
9 Assignments
0 Petitions
Accused Products
Abstract
A method for protecting objects in a computer system against malware is disclosed. An object is analyzed to determine whether it is infected by malware, and if it is determined to be infected, a backup copy of the object is located in a backup of the objects. The infected object is replaced with the backup copy.
83 Citations
20 Claims
-
1. A method for protecting objects in a system comprising a backup including backup copies of the objects, the method comprising:
-
determining a pattern associated with an object, using at least one backup copy of the object; and detecting a deviation from the pattern to identify an anomaly indicating that the object is infected by malware. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18)
-
-
19. A computer program product for protecting objects in a system comprising a backup including backup copies of the objects, the computer program product being embodied in a computer readable medium and comprising computer instructions for:
-
determining a pattern associated with an object, using at least one backup copy of the object; and detecting a deviation from the pattern to identify an anomaly indicating that the object is infected by malware.
-
-
20. A system for protecting objects, comprising a backup including backup copies of the objects, and a processor configured to:
-
determine a pattern associated with an object, using at least one backup copy of the object; and detect a deviation from the pattern to identify an anomaly indicating that the object is infected by malware.
-
Specification