Back to results
US 2016/0253501 A1Published application
Method for Detecting a Unified Extensible Firmware Interface Protocol Reload Attack and System Therefor
AssigneeDell Products L.P.
InventorAllen C. Wynn
Life of this patent
Estimating the term…
Abstract
An installation notification routine is initialized at a driver, the routine maintaining a count of installation notifications corresponding to a first global unique identifier (GUID) received at the driver. The driver registers for protocol installation notification corresponding to the first GUID. Malicious activity is identified in response to receiving more than one installation notification at the installation notification routine.
Claims20
A method comprising:
- initializing an installation notification routine at a driver at a data processing device, the routine maintaining a count of installation notifications corresponding to a first global unique identifier (GUID) received at the driver;
- registering for protocol installation notification during initialization of the driver, the protocol corresponding to the first GUID;
- and
- identifying malicious activity in response to receiving more than one installation notification at the installation notification routine.
1 more element
An information handling system comprising:
- a processor;
- and
- a memory device for storing instructions, the instructions to:
- initialize an installation notification routine at a driver, the routine maintaining a count of installation notifications corresponding to a first global unique identifier (GUID) received at the driver;
- register for protocol installation notification during initialization of the driver, the protocol corresponding to the first GUID;
- and
- identify malicious activity in response to receiving more than one installation notification at the installation notification routine.
4 more elements
A non-transitory data storage medium storing instructions executable by a processor to cause the processor to:
- initialize an installation notification routine at a driver, the routine maintaining a count of installation notifications corresponding to a first global unique identifier (GUID) received at the driver;
- register for protocol installation notification during initialization of the driver, the protocol corresponding to the first GUID;
- and
- identify malicious activity in response to receiving more than one installation notification at the installation notification routine.
1 more element
Dependencies are inferred from the claim text.