SYSTEM AND METHOD OF PROTECTING COMPUTING DEVICE FROM MALICIOUS OBJECTS USING COMPLEX INFECTION SCHEMES Russian patent published in 2012 - IPC G06F11/00 

FIELD: information technology.

SUBSTANCE: method is realised by isolating processes launched from those inspection objects which are trusted using a means of analysing objects. Then, using a means of creating contexts, contexts are created and stored in a means of storing contexts. These contexts are then analysed by a means of analysing contexts using rule bases from the means of storing rule bases in order to detect malicious objects. Based on results of analysing the created contexts, this invention enables to determine malicious objects from malicious processes launched from said objects and protect a computing device from actions of the malicious objects by ending these malicious processes.

EFFECT: high level of protecting computing devices from malicious objects owing to analysis of processes on the computing device and ending processes launched from the malicious objects.

34 cl, 5 dwg