SYSTEM AND METHOD OF DETECTING MALICIOUS SCRIPT Russian patent published in 2018 - IPC G06F21/55 G06F21/57 G06F12/14 

FIELD: information technology.

SUBSTANCE: invention relates to the field of information security, namely the detection of a malicious script. Method for detecting a malicious script, performed by a computer system, in which it is detected that the process is started from the trusted executable file of the scripting interpreter, detect the process execution address to the suspicious memory address, analyze the memory area in the process address space in the vicinity of the suspect memory address, during the analysis detect an image of the executable file downloaded from another file in the process address space, detect malicious code in the address space of the process by analyzing the detected image of the executable file downloaded from another file, recognize a malicious script, which instructions were executed by the scripting interpreter until the malicious code was detected in the address space of the process started from the trusted executable file of the scripting interpreter.

EFFECT: wider range of technical means for detecting a malicious script.

5 cl, 3 dwg