20250173429. Malware Mitigation Based Run (Sophos Limited)

MALWARE MITIGATION BASED ON RUNTIME MEMORY ALLOCATION

Abstract: a compute instance is instrumented to detect certain kernel memory allocation functions, in particular functions that allocate heap memory and/or make allocated memory executable. dynamic shell code exploits can then be detected when code executing from heap memory allocates additional heap memory and makes that additional heap memory executable.

Inventor(s): Lute Edwin Engels, Mark Willem Loman, Alexander Vermaning, Erik Jan Loman, Victor Marinus Johann Simon van Hillo

CPC Classification: G06F21/55 (Detecting local intrusion or implementing counter-measures)

Search for rejections for patent application number 20250173429