PROTECTION FROM EXPLOITATION OF SOFTWARE VULNERABILITY Russian patent published in 2011 - IPC G06F21/22 

FIELD: information technology.

SUBSTANCE: in a target computer in a network computing environment, the method of minimising exploitation of software vulnerability by an intruder, where the software is installed on the target computer, by studying network traffic and identifying malicious code before it can be executed and/or installed. On the transport layer (for example, transmission control protocol (TCP) socket layer) network traffic can be viewed using a security component installed on the target computer. Upon reception of a message meant for the computer system, data included in the message are compared with exploit features used to identify the malicious code. Exploit features are provided for the security component by a security service which gathers information on the malicious code. Based on comparison of data in the message and exploit features, rules are identified, which instruct the security component to perform corresponding actions on the received message.

EFFECT: narrowing the risk window for computers which are potential targets of intruders.

19 cl, 2 dwg