Abstract: The present invention extends to methods, systems, and computer program products for identifying software execution behavior. Embodiments of the invention can be used to assist a user in a making a reasoned and informed decision about whether the behavior of executable code is malicious. Data indicative of executable code behavior can be collected statically without having to execute the executable code. Behavior data can be collected essentially automatically with little, if any, user involvement. A user initiates analysis of executable code and is provided a visual categorized representation of behavior data for the executable code.
Type:
Grant
Filed:
January 13, 2012
Date of Patent:
September 10, 2013
Assignee:
AccessData Group, LLC
Inventors:
Allen Mark Saunders, Andrew Walter Ruef
Abstract: The present invention extends to methods, systems, and computer program products for identifying software execution behavior. Embodiments of the invention can be used to assist a user in a making a reasoned and informed decision about whether the behavior of executable code is malicious. Data indicative of executable code behavior can be collected statically without having to execute the executable code. Behavior data can be collected essentially automatically with little, if any, user involvement. A user initiates analysis of executable code and is provided a visual categorized representation of behavior data for the executable code.
Type:
Application
Filed:
January 13, 2012
Publication date:
July 18, 2013
Applicant:
ACCESSDATA GROUP, LLC
Inventors:
Allen Mark Saunders, Andrew Walter Ruef