×

White list creation in behavior monitoring system

  • US 8,161,552 B1
  • Filed: 09/23/2009
  • Issued: 04/17/2012
  • Est. Priority Date: 09/23/2009
  • Status: Active Grant
First Claim
Patent Images

1. A method of maintaining a white list for use in a behavior monitoring system for malware detection executing on a computing device, the method comprising:

  • detecting execution of a process;

    determining that the process has a valid digital signature;

    determining that the process is not launched from a removable storage device;

    determining that the process is not enabled to make an inbound connection to the computing device;

    determining that the process is not enabled to make an outbound connection to an external component from the computing device; and

    automatically updating the white list with a process identifier associated with said process, thereby maintaining the white list without human intervention.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×