Virtual machine to detect malicious code
First Claim
1. A method comprising:
- receiving in a virtual machine contents of a program for creating a virtual environment for interacting with a host platform in a computing device; and
determining by the virtual machine if the received contents comprises predetermined instructions for performing at least one unauthorized task.
1 Assignment
0 Petitions
Accused Products
Abstract
One embodiment of the invention discloses a method for receiving in a virtual machine (VM) contents of a program for creating a virtual environment for interacting with a host platform in a computing device; and determining by the VM if the received contents comprise predetermined instructions for performing at least one unauthorized task. Another embodiment of the invention discloses a method for receiving a system call for a host platform in communication with a VM of a computing device; and determining by the VM if the received system call comprises at least one predetermined system call for performing at least one unauthorized task. Yet another embodiment of the invention discloses a method for receiving a virtualized memory address for a host platform in communication with a VM of a computing device; and determining by the VM if the received virtualized memory address comprises at least one predetermined unauthorized virtualized memory address.
-
Citations
20 Claims
-
1. A method comprising:
-
receiving in a virtual machine contents of a program for creating a virtual environment for interacting with a host platform in a computing device; and determining by the virtual machine if the received contents comprises predetermined instructions for performing at least one unauthorized task. - View Dependent Claims (2, 3, 4, 5, 6)
-
-
7. A system comprising:
a virtual machine to receive contents of a program for creating a virtual environment for interacting with a host platform in a computing device, the virtual machine comprising a detector subsystem to determine if the received contents comprises predetermined instructions for performing at least one unauthorized task. - View Dependent Claims (8, 9, 10, 11)
-
12. A storage medium that provides software that, if executed by a computing device, will cause the computing device to perform the following operations:
-
receiving in a virtual machine contents of a program for creating a virtual environment for interacting with a host platform in a computing device; and determining by the virtual machine if the received contents comprises predetermined instructions for performing at least one unauthorized task. - View Dependent Claims (13, 14)
-
-
15. A method comprising:
-
receiving a system call for a host platform in communication with a virtual machine of a computing device; and determining by the virtual machine if the received system call comprises at least one predetermined system call for performing at least one unauthorized task. - View Dependent Claims (16, 17)
-
-
18. A method comprising:
-
receiving a virtualized memory address for a host platform in communication with a virtual machine of a computing device; and determining by the virtual machine if the received virtualized memory address comprises at least one predetermined unauthorized virtualized memory address. - View Dependent Claims (19, 20)
-
Specification