System, method and computer program product for detecting activity in association with program resources that has at least a potential of an unwanted effect on the program

• US 20130276109A1
• Filed: 07/11/2006
• Published: 10/17/2013
• Est. Priority Date: 07/11/2006
• Status: Abandoned Application

• Current Assignee: McAfee, Inc. (McAfee, LLC)
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Prakash, Ranjan
• Application Number:
  US11/484,447
• Publication Number:
  US 20130276109A1
• Time in Patent Office: Days
• US Class Current: 726/23
• CPC Class Codes: G06F 21/554 involving event detection and direct action

Abstract

A system, method and computer program product are provided. In use, at least one resource utilized by a program is monitored. In addition, activity in association with the at least one resource that has at least a potential of an unwanted effect on the program is detected. Further, a reaction is performed in response to detecting the activity to prevent the unwanted effect.

Claims

1. A method, comprising:

selecting a first function and a second function of a plurality of functions of a computer program;

monitoring at least one resource associated with the first function and the second function, utilizing a processor;

detecting activity by the first function in association with the at least one resource that has at least a potential of an unwanted effect on the second function; and

reacting in response to detecting the activity to prevent the unwanted effect, comprising;

determining that the second function has a higher priority than the first function; and

temporarily disabling the first function until the second function has finished utilizing the at least one resource.

2. The method of claim 1, further comprising identifying the first function and the second function.

3. The method of claim 2, wherein the first function and second function are identified by receiving a selection of the first function and the second function from a user.

4. The method of claim 1, wherein the first function and the second function are selected by a user utilizing a graphical user interface.

6. The method of claim 1, wherein the at least one resource that is monitored is identified based on the first function and the second function.

8. The method of claim 6, wherein the at least one resource that is monitored is identified based on a mapping between a plurality of functions and a plurality of resources.

9. The method of claim 1, wherein the at least one resource includes at least one of a network resource, a processing resource, a storage resource, and a registry resource.

10. The method of claim 1, wherein the monitoring includes monitoring calls associated with an operating system running in association with the first function and the second function.

12. The method of claim 1, wherein the unwanted effect includes an error in association with the second function.

13. The method of claim 1, wherein the act of reacting is user- configurable.

14. The method of claim 13, wherein the act of reacting is user-configurable utilizing a graphical user interface.

15. The method of claim 1, wherein the act of reacting includes sending a notification.

16. The method of claim 1, wherein the act of reacting includes preventing the activity.

18. The method of claim 1, wherein the act of reacting is performed for combating terrorism.

21. The method of claim 10, wherein the calls associated with the operating system running in association with the program are monitored utilizing a hooking application.

22. The method of claim 1, wherein hooks within an operating system utilized by the first function and the second function are implemented to perform the act of reacting.

23. The method of claim 1, wherein the act of reacting further comprises:

reporting a status of the at least one resource using a markup language.

5. (canceled)

7. (canceled)

11. (canceled)

17. (canceled)

19. A computer program product embodied on a non-transitory tangible computer readable medium, comprising:

computer code for selecting a first function and a second function of a plurality of functions of a computer program;

computer code for monitoring at least one resource associated with a first function and a second function;

computer code for detecting activity by the first function in association with the at least one resource that has at least a potential of an unwanted effect on the second function; and

computer code for reacting in response to detecting the activity to prevent the unwanted effect, comprising;

computer code for terminating the first function responsive to determination that the second function has a higher priority than the first function.

20. A system, comprising:

a processor;

a program, executable on the processor, comprising a plurality of functions; and

an application, executable on the processor, for

selecting the first function and the second function from the plurality of functions;

detecting activity by the first function in association with at least one resource that has at least a potential of an unwanted effect on the second function; and

performing a reaction in response to detecting the activity to prevent the unwanted effect, comprising;

suspending the first function temporarily if the second function has a higher priority than the first function.