Back to results
US 8,898,778 B2Granted
System, method, and computer program product for identifying vulnerabilities associated with data loaded in memory
AssigneeMcAfee, Inc.
InventorsAnthony J. Bettini, Michael M. Price
Life of this patent
Estimating the term…
Abstract
By way of example, a system, method, and computer program product are provided for identifying vulnerabilities associated with data loaded in memory. In operation, a subset of data that is loaded in memory is identified, including for example by name and version number. The subset of data is compared to a known minimal version known to be good. Furthermore, there is a reaction based on the comparison, such as reporting a vulnerability.
Claims23
A method, comprising:
- loading a subset of data into a memory of a host device in connection with importing a library;
- identifying the subset of data by a name and a version identifier;
- comparing the name of the subset of data to a list of names of known data, which includes comparing the name of the subset of data with at least one name of the known data, and comparing the version identifier of the subset of data with a minimum version identifier of the known data known to be safe;
- and
- reacting based on the comparison, including reporting a vulnerability for the subset of data.
2 more elements
An apparatus, comprising:
- a processor and memory;
- and
- logic encoded on one or more non-transitory storage media and operable for instructing the processor and memory for:
- loading a subset of data into a memory of a host device in connection with importing a library;
- identifying the subset of data by a name and a version identifier;
- comparing the name of the subset of data to a list of names of known data, which includes comparing the name of the subset of data with at least one name of the known data, and comparing the version identifier of the subset of data with a minimum version identifier of the known data known to be safe;
- and
- reporting a vulnerability for the subset of data.
5 more elements
Dependencies are inferred from the claim text.