SECURITY AGENT, OPERATING AT EMBEDDED SOFTWARE LEVEL WITH SUPPORT OF OPERATING SYSTEM SECURITY LEVEL Russian patent published in 2016 - IPC G06F12/14 G06F21/52 G06F21/56 

FIELD: safety.

SUBSTANCE: present invention relates to systems and methods of ensuring safety and more specifically to systems and methods of ensuring safety of operating irrespective of operating system, but made with support of security applications operating at level of operating system. Method of providing safety of computer system at stage to launch an operating system includes: a) bringing starting UEFI from permanent memory before running operating system; b) starting from UEFI security agent, operating irrespective of operating system; in) carrying out by scanning security agent and further removal or quarantine malware; where scanning for presence of malware is carried out only among objects related to start-up operating system and associated with security application, installed in operating system; and where scanning security agent used is regularly updated database definitions malware, stored at level of said UEFI; d) detection by means of security agent conditions associated with events occurring prior to last operating system shutdown, at least one of following types: determining failure safety application, installed in operating system, perform its functions; detection of changes in computer system, affecting start-up process operating system; d) determination of security agent, at least one corresponding, at least, one of detected state of said types, where action include at least one of: control objects, stored in file system computer system; implementing interaction with remote servers; recoil to earlier versions of applications installed in operating system; sending request for execution of security agent by after launching operating system action on side of security applications installed in operating system; e) making by means of security agent said defined in paragraph d), at least one corresponding, at least, one of detected state of said types.

EFFECT: technical result of this invention consists in improvement of safety of computer system by providing safety of computer system at stage to start operating system.

9 cl, 10 dwg