SYSTEM AND METHOD OF ASSESSMENT OF HARMFULLNESS OF CODE EXECUTED IN ADDRESSING SPACE OF CONFIDENTIAL PROCESS Russian patent published in 2014 - IPC G06F21/55 

FIELD: physics, computer technology.

SUBSTANCE: invention relates to computer technology. The method of assessment of harmfulness of the code executed in addressing space of confidential process, which defines the attributes of unreliable processes, critical functions and criteria of harmfulness of the executed code; the defined attributes of unreliable processes, critical functions and criteria of harmfulness of the executed code are kept; among the processes, started in operating system, unreliable process is identified by presence of defined attributes; the call of critical function is intercepted, that is carried out on behalf of unreliable process; an executed code initiated the call of critical function is identified using the analysis of the call stack; an executed code is recognised as harmful on the basis of the analysis of the defined criteria.

EFFECT: improvement of efficiency of assessment of harmfulness of the code executed in addressing space of confidential process.

14 cl, 7 dwg