公开(公告)号：US09129111B2

公开(公告)日：2015-09-08

申请号：US11814305

申请日：2006-01-18

申请人： William Grant Rothwell

发明人： William Grant Rothwell

IPC分类号： H04L29/06 ,  G06F21/56 ,  G06F21/00

CPC分类号： G06F21/566 ,  G06F21/567 ,  G06F2221/034

摘要： A method is provided of protecting a computer against malware affection. The computer has a data storage and an operating system for managing the data storage. The method comprises providing a filter module in the operating system which operates to detect an attempt to store data in the data storage, to determine a data format of the data to be stored in the data storage, and to prevent storage of the data if the data format is determined to relate to a predefined type. The filter module may be provided as a file system filter driver in a kernel of the operating system. The filter module may be arranged to operate between an input/output manager of the operating system and a driver associated with the data storage. The input/output manager and driver associated with the data storage may form part of the kernel of the operating system.

摘要翻译： 提供了一种保护计算机免受恶意软件感染的方法。 计算机具有用于管理数据存储的数据存储和操作系统。 该方法包括在操作系统中提供过滤器模块，其操作以检测将数据存储在数据存储器中的尝试，以确定要存储在数据存储器中的数据的数据格式，并且如果 数据格式被确定为与预定类型相关。 过滤器模块可以作为操作系统的内核中的文件系统过滤器驱动器提供。 过滤器模块可以布置成在操作系统的输入/输出管理器和与数据存储器相关联的驱动器之间操作。 与数据存储相关联的输入/输出管理器和驱动程序可以构成操作系统内核的一部分。

公开(公告)号：US09760715B2

公开(公告)日：2017-09-12

申请号：US14807003

申请日：2015-07-23

申请人： William Grant Rothwell

发明人： William Grant Rothwell

IPC分类号： H04L29/06 ,  G06F21/56 ,  H04L9/32

CPC分类号： G06F21/566 ,  G06F21/567 ,  G06F2221/034

摘要： A method is provided of protecting a computer against malware affection. The computer has a data storage and an operating system for managing the data storage. The method comprises providing a filter module in the operating system which operates to detect an attempt to store data in the data storage, to determine a data format of the data to be stored in the data storage, and to prevent storage of the data if the data format is determined to relate to a predefined type. The filter module may be provided as a file system filter driver in a kernel of the operating system. The filter module may be arranged to operate between an input/output manager of the operating system and a driver associated with the data storage. The input/output manager and driver associated with the data storage may form part of the kernel of the operating system.

公开(公告)号：US20100043072A1

公开(公告)日：2010-02-18

申请号：US11814305

申请日：2006-01-18

申请人： William Grant Rothwell

发明人： William Grant Rothwell

IPC分类号： G06F21/22

CPC分类号： G06F21/566 ,  G06F21/567 ,  G06F2221/034

摘要： A method is provided of protecting a computer against malware affection. The computer has a data storage and an operating system for managing the data storage. The method comprises providing a filter module in the operating system which operates to detect an attempt to store data in the data storage, to determine a data format of the data to be stored in the data storage, and to prevent storage of the data if the data format is determined to relate to a predefined type. The filter module may be provided as a file system filter driver in a kernel of the operating system. The filter module may be arranged to operate between an input/output manager of the operating system and a driver associated with the data storage. The input/output manager and driver associated with the data storage may form part of the kernel of the operating system.

摘要翻译： 提供了一种保护计算机免受恶意软件感染的方法。 计算机具有用于管理数据存储的数据存储和操作系统。 该方法包括在操作系统中提供过滤器模块，其操作以检测将数据存储在数据存储器中的尝试，以确定要存储在数据存储器中的数据的数据格式，并且如果 数据格式被确定为与预定类型相关。 过滤器模块可以作为操作系统的内核中的文件系统过滤器驱动器提供。 过滤器模块可以布置成在操作系统的输入/输出管理器和与数据存储器相关联的驱动器之间操作。 与数据存储相关联的输入/输出管理器和驱动程序可以构成操作系统内核的一部分。