Security method and apparatus directed at removeable storage devices
AssigneeF-Secure Oyj
InventorPavel Turbin
Life of this patent
Estimating the term…
Abstract
A method of protecting a computer against malware infection. The method includes during operation of the computer, reading master boot record code from a removable storage device into the computer and inspecting said code to identify any instructions associated with suspicious behaviour. In the event that suspicious instructions are identified, the master boot record code on the removable storage device is modified and/or the behaviour of the computer adapted in order to prevent said master boot record code installing malware into the computer. Examples of suspicious behaviour include hard disk read or write operations.
Claims14
A method of protecting a computer against malware infection, the method comprising:
- during operation of the computer, reading master boot record code from a removable storage device into the computer;
- inspecting said code to identify any instructions associated with suspicious behaviour;
- and
- in the event that suspicious instructions are identified, modifying the master boot record code on the removable storage device and/or adapting the behaviour of the computer in order to prevent said master boot record code installing malware into the computer.
A computer program for causing a computer to:
- read into the computer a master boot record code from a removable storage device;
- inspect said code to identify any instructions associated with suspicious behaviour;
- and
- in the event that suspicious instructions are identified, modify the master boot record code on the removable storage device and/or adapt the behaviour of the computer in order to prevent said master boot record code installing malware into the computer.
A computer comprising:
- a code retrieval unit for reading master boot record code from a removable storage device into the computer;
- a scanning unit for scanning the read code to identify any instructions associated with suspicious behaviour;
- and
- an action unit configured, in the event that suspicious instructions are identified, to modify the master boot record code on the removable storage device and/or adapt the behaviour of the computer in order to prevent said master boot record code installing malware into the computer.
Dependencies are inferred from the claim text.