Method and system for protecting a computer system during boot operation
AssigneeTrend Micro Incorporated
InventorKevin Gerard BOYCE
Life of this patent
Estimating the term…
Abstract
A method for protecting a computer system from malicious network traffic is provided using a driver which inspects network packets. A security profile comprising packet inspection rules is compiled and stored on the computer system. During the startup or boot operation of an operating system, the driver loads the compiled security profile and inspects network packets using the inspection rules.
Claims20
A method of protecting a computer system in a computer network during boot operation of an operating system of the computer system, the method comprising the steps of:
- (1) compiling a security profile of the computer system into a compiled security profile;
- (2) storing the compiled security profile to a computer readable storage medium accessible during boot operation of the operating system of the computer system to a driver of the computer system;
- and
- (3) by the driver, loading the compiled security profile from the computer readable storage medium into a memory of the computer system during the boot operation for the purpose of inspecting packets transmitted to and from the computer system via the computer network based on the compiled security profile.
A method of inspecting a data packet transmitted to a computer system in a computer network during boot operation of an operating system of the computer system, the method comprising the steps of:
- (1) compiling a security profile of the computer system into a compiled security profile, the security profile comprising one or more packet inspection rules;
- (2) storing the compiled security profile to a computer readable storage medium accessible during boot operation of the computer system to a driver of the computer system;
- (3) by the driver, loading the compiled security profile from the computer readable storage medium into a memory of the computer system during the boot operation;
- and
- (4) by the driver, inspecting the data packet by comparing at least a portion of the data packet with at least a portion of the compiled security profile.
A system for protecting a computer system in a computer network during boot operation of an operating system of the computer system, the system comprising:
- (1) a compiler, for compiling a security profile of the computer system into a compiled security profile and storing the compiled security profile to a computer readable storage medium;
- and
- (2) a driver of the computer system, for loading the compiled security profile from the computer readable storage medium into a memory of the computer system during boot operation of an operating system of the computer system, and inspecting packets transmitted to the computer system by the computer network based on the compiled security profile.
A boot protection apparatus for a computer system in a computer network, comprising:
- a driver stored in a computer readable medium, the driver comprising:
- a boot module, which loads a compiled security profile comprising packet inspection rules from a computer readable storage medium into a memory of the computer system during boot operation of an operating system of the computer system, and;
- a packet module, which inspects packets transmitted to the computer system by the computer network based on the inspection rules.
Dependencies are inferred from the claim text.