METHOD FOR DETECTING MALICIOUS SOFTWARE AND ELEMENTS Russian patent published in 2017 - IPC G06F21/56 G06F17/30 H04L29/02 

FIELD: information technology.

SUBSTANCE: method involves the analysis of programmes or messages that meet the suspicion criteria or criteria groups, and the creation of a message indicating the result of malicious elements detection, wherein in a server, or a browser, or a communication channel therebetween a filter system is inserted, which analyzes the transmitted documents taking into account the database including the data on the known safe elements, and if the document contains unknown potentially malicious elements absent in the safe elements database, the received document is decomposed into a plurality of individual ones containing the unknown potentially malicious elements from which files are created, the number of which correlates with the number of decomposed elements, after which one or more sets of files are composed from decomposed elements, which are subjected to the dynamic detection for tracking the deviations from the normal client programme behaviour as a result of malicious elements actions, and the document is transmitted to the browser without the identified malicious elements.

EFFECT: increasing the malicious programmes and elements detection reliability.

12 cl, 1 dwg