Platform abstraction layer for a wireless malware scanning engine

• US 7,096,368 B2
• Filed: 04/12/2002
• Issued: 08/22/2006
• Est. Priority Date: 08/01/2001
• Status: Expired due to Fees

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Palmer, David W., Libenzi, Davide, Fallenstedt, Martin, Kouznetsov, Victor, Pak, Michael C.
• Primary Examiner(s): Peeso, Thomas R.
• Application Number:
  US10/121,639
• Publication Number:
  US 20030079145A1
• Time in Patent Office: 1,593 Days
• Field of Search: 713/189, 713/193, 713/194, 713/200, 713/201
• US Class Current: 713/189
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/562 Static detection
• CPC Class Codes: G06F 21/564 by virus signature recognition
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: H04W 8/245 from a network towards a terminal

Abstract

A system, method and computer program product are provided for scanning a mobile wireless device for malware. Initially, a platform abstraction layer of a mobile wireless device is called. Further, an anti-malware scanner-related function module on the mobile wireless device is initiated utilizing the platform abstraction layer. Such platform abstraction layer enables the anti-malware scanner-related function module to be initiated on any of a plurality of different mobile wireless devices.

Claims

1. A method for scanning a mobile wireless device for malware, comprising:

calling a platform abstraction layer of a mobile wireless device;

accessing data stored in persistent memory of the mobile wireless device; and

initiating an anti-malware scanner-related function module on the mobile wireless device to scan the data utilizing the platform abstraction layer;

wherein the platform abstraction layer enables the anti-malware scanner-related function module to be initiated on any of a plurality of different mobile wireless devices;

wherein the data is accessed utilizing an abstract file system interface;

wherein the abstract file system interface is implemented for each class of the data stored in the persistent memory.

2. The method as recited in claim 1, wherein the platform abstraction layer includes storage I/O interfaces.

3. The method as recited in claim 1, wherein the platform abstraction layer includes dynamic memory allocation interfaces.

4. The method as recited in claim 1, wherein the platform abstraction layer includes process control call interfaces.

5. The method as recited in claim 1, wherein the platform abstraction layer includes network I/O call interfaces.

6. The method as recited in claim 1, wherein the platform abstraction layer includes system event handler interfaces.

7. The method as recited in claim 1, wherein the platform abstraction layer includes system information routine interfaces.

8. The method as recited in claim 1, wherein the platform abstraction layer includes storage I/O interfaces, dynamic memory allocation interfaces, process control call interfaces, network I/O call interfaces, system event handler interfaces, and system information routine interfaces.

9. The method as recited in claim 1, wherein the platform abstraction layer provides a common view of an operating system of the mobile wireless device.

10. The method as recited in claim 1, wherein the abstract file system interface includes an abstract directory interface.

11. The method as recited in claim 1, wherein the abstract file system interface includes data structures with call back functions.

12. The method as recited in claim 11, wherein the call back functions enumerate the data.

13. The method as recited in claim 11, wherein the call back functions manipulate the data.

14. A computer program product for scanning a mobile wireless device for malware, comprising:

computer code for calling a platform abstraction layer of a mobile wireless device;

computer code for accessing data stored in persistent memory of the mobile wireless device; and

computer code for initiating an anti-malware scanner-related function module on the mobile wireless device to scan the data utilizing the platform abstraction layer;

wherein the platform abstraction layer enables the anti-malware scanner-related function module to be initiated on any of a plurality of different mobile wireless devices;

wherein the data is accessed utilizing an abstract file system interface;

wherein the abstract file system interface is implemented for each class of the data stored in the persistent memory.

15. The computer program product as recited in claim 14, wherein the platform abstraction layer includes storage I/O interfaces.

16. The computer program product as recited in claim 14, wherein the platform abstraction layer includes dynamic memory allocation interfaces.

17. The computer program product as recited in claim 14, wherein the platform abstraction layer includes process control calls.

18. The computer program product as recited in claim 14, wherein the platform abstraction layer includes network I/O calls.

19. The computer program product as recited in claim 14, wherein the platform abstraction layer includes system event handler interfaces.

20. The computer program product as recited in claim 14, wherein the platform abstraction layer includes system information routines.

21. The computer program product as recited in claim 14, wherein the platform abstraction layer includes storage I/O interfaces, dynamic memory allocation interfaces, process control calls, network I/O calls, system event handler interfaces, and system information routines.

22. The computer program product as recited in claim 14, wherein the platform abstraction layer provides a common view of an operating system of the mobile wireless device.

23. A system for scanning a mobile wireless device for malware, comprising:

logic for calling a platform abstraction layer of a mobile wireless device;

logic for accessing data stored in persistent memory of the mobile wireless device; and

logic for initiating an anti-malware scanner-related function module on the mobile wireless device to scan the data utilizing the platform abstraction layer;

wherein the platform abstraction layer enables the anti-malware scanner-related function module to be initiated on any of a plurality of different mobile wireless devices;

wherein the data is accessed utilizing an abstract file system interface;

wherein the abstract file system interface is implemented for each class of the data stored in the persistent memory.

24. A system for scanning a mobile wireless device for malware, comprising:

means for calling a platform abstraction layer of a mobile wireless device;

means for accessing data stored in persistent memory of the mobile wireless device; and

means for initiating an anti-malware scanner-related function module on the mobile wireless device to scan the data utilizing the platform abstraction layer;

wherein the platform abstraction layer enables the anti-malware scanner-related function module to be initiated on any of a plurality of different mobile wireless devices;

wherein the data is accessed utilizing an abstract file system interface;

wherein the abstract file system interface is implemented for each class of the data stored in the persistent memory.

25. A method for scanning a mobile wireless device for malware, comprising:

calling a platform abstraction layer of a mobile wireless device;

accessing data stared in persistent memory of the mobile wireless device; and

initiating an anti-malware scanner-related function module on the mobile wireless device to scan the data utilizing the platform abstraction layer;

wherein the platform abstraction layer includes entities selected from the group consisting of storage I/O interfaces, dynamic memory allocation interfaces, process control call interfaces, network I/O call interfaces, system event handler interfaces, and system information routine interfaces;

wherein the data is accessed utilizing an abstract file system interface;

wherein the abstract file system interface is implemented for each class of the data stored in the insistent memory.