BINARY VERIFICATION SERVICE

• US 20080258865A1
• Filed: 04/18/2007
• Published: 10/23/2008
• Est. Priority Date: 04/18/2007
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Levin, Vladimir A., Bendapudi, Perraju, Ganapathy, Narayanan, Shastry, Shankara M. C.
• Granted Patent: US 8,074,205 B2
• Time in Patent Office: Days
• US Class Current: 340/5.21
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security

Abstract

A binary is received at a binary verification service from a binary verification client agent. The binary verification service performs binary verification of the binary, wherein binary verification includes determining whether the binary is complicit with a set of usage rules. The binary verification service sends a binary verification result to the binary verification client agent.

Claims

1. A method, comprising:

receiving, at a binary verification service, a binary from a binary verification client agent;

performing, by the binary verification service, binary verification of the binary, wherein binary verification includes determining whether the binary is complicit with a set of usage rules; and

sending, by a binary verification service, a binary verification result to the binary verification client agent.

2. The method of claim 1, further comprising:

storing, by the binary verification service, the binary verification result in a binary verification service database.

3. The method of claim 1, further comprising:

receiving, at the binary verification service, binary identification information associated with a second binary;

looking up, by the binary verification service, a binary verification result in a binary verification service database using the binary identification information; and

sending, by the binary verification service, the binary verification result corresponding to the second binary found in the binary verification service database to the binary verification client agent.

4. The method of claim 1, further comprising:

receiving, at the binary verification service, a new usage rule; and

updating, by the binary verification service, the set of usage rules with the new usage rule.

5. The method of claim 4, further comprising

performing, by the binary verification service, binary verification of binaries stored in a binary verification service database using the updated set of usage rules;

and

updating, by the binary verification service, the binary verification results corresponding to the binaries stored in the binary verification service database.

6. The method of claim 5, further comprising:

notifying, by the binary verification service, one or more users of one or more updated verification results.

7. The method of claim 1 wherein the binary verification result includes a grade for the binary.

8. One or more computer readable media including computer readable instructions that when executed perform the method of claim 1.

9. A method, comprising:

sending, by a binary verification client agent, a binary to a binary verification service; and

receiving, at the binary verification client agent, a binary verification result for the binary from the binary verification service.

10. The method of claim 9, further comprising:

selecting, at the binary verification client agent, the binary for verification based at least in part on user input at the binary verification client agent.

11. The method of claim 9, further comprising:

sending, by the binary verification client agent, binary identification information associated with the binary to the binary verification service; and

receiving a request for the binary from the binary verification service, wherein the binary verification service does not have a binary verification result stored for the binary.

12. The method of claim 9, further comprising:

presenting, by the binary verification client agent, the binary verification result to a user.

13. The method of claim 9, further comprising:

sending, by the binary verification client agent, a new rule to the binary verification service to update the set of usage rules.

14. One or more computer readable media including computer readable instructions that when executed perform the method of claim 9.

15. A system, comprising:

a binary;

a binary verification client agent; and

a binary verification service connected to the binary verification client agent, the binary verification service to provide a binary verification result for the binary to the binary verification client agent in response to a binary verification request from the binary verification client agent.

16. The system of claim 15 wherein the binary verification request includes binary identification information associated with the binary, the binary verification service to provide the binary verification result from a binary verification service database having stored the binary verification result.

17. The system of claim 15 wherein the binary verification request includes the binary, the binary verification service to perform binary verification of the binary.

18. The system of claim 17 wherein the binary verification service to store the binary verification result in a binary verification service database.

19. The system of claim 15 wherein the binary verification service to receive a new usage rule from the client agent and to update a set of usage rules at the binary verification service with the new usage rule.

20. The system of claim 19 wherein the binary verification service to perform binary verification of the binary stored in a binary verification service database using the updated set of usage rules, to update the binary verification result corresponding to the binary stored in the binary verification service database, and to notify the binary verification client agent of the updated binary verification result for the binary.