Invention Grant
- Patent Title: Systems and methods for detecting a process to establish a backdoor connection with a computing device
- Patent Title (中): 用于检测与计算设备建立后门连接的过程的系统和方法
-
Application No.: US12571121Application Date: 2009-09-30
-
Publication No.: US08683576B1Publication Date: 2014-03-25
- Inventor: James Yun
- Applicant: James Yun
- Applicant Address: US CA Mountain View
- Assignee: Symantec Corporation
- Current Assignee: Symantec Corporation
- Current Assignee Address: US CA Mountain View
- Agency: Holland & Hart LLP
- Main IPC: G06F7/04
- IPC: G06F7/04 ; G06F12/00 ; G06F12/14 ; G06F13/00 ; G06F17/30 ; G11C7/00
Abstract:
A computer-implemented method for detecting a process to establish a backdoor connection with the computer is described. An application programming interface (API) is hooked. Calls to the hooked API are monitored. A call directed to the hooked API is intercepted. The call instructs the API to initiate a user interface. Structures included in the intercepted call are analyzed. The intercepted call is prevented from arriving at the hooked API if the structures are directed to a socket on the computer.
Information query
