FIELD: computer equipment.
SUBSTANCE: invention relates to computer engineering. Method for generating a set of convolutions of safe events in which an agent is launched in the operating system of at least one knowingly safe computer device, registering events of at least one type occurring in the operating system of the computer device, where at least the types of events are: start of processes; loading modules; file operations; register operations; detect interceptors installed in the operating system, an event that has occurred in the operating system; register the agent with the detected event and receive from the computer device the context of the specified event; allocate from the received context of the event the signs of the event and form the convolution of the detected event on the basis of the selected features; add convolution to a set of convolutions of safe events.
EFFECT: technical result is to ensure the formation of convolutions of safe events.
45 cl, 5 dwg
| Title | Year | Author | Number |
|---|---|---|---|
| METHOD OF THE ANOMALOUS EVENTS DETECTING BY THE EVENT DIGEST POPULARITY | 2017 |
|
RU2651196C1 |
| SYSTEM AND METHOD OF GENERATING LOG WHEN EXECUTING FILE WITH VULNERABILITIES IN VIRTUAL MACHINE | 2018 |
|
RU2724790C1 |
| SYSTEM AND METHOD OF DETECTING MALICIOUS CODE IN FILE | 2016 |
|
RU2637997C1 |
| SYSTEM AND METHOD OF MAKING FLEXIBLE CONVOLUTION FOR MALWARE DETECTION | 2013 |
|
RU2580036C2 |
| METHOD OF CREATING SCRIPT OF POPULAR ACTIVATION EVENTS | 2015 |
|
RU2679783C2 |
| METHOD FOR PROCESSING INFORMATION SECURITY EVENTS PRIOR TO TRANSMISSION FOR ANALYSIS | 2020 |
|
RU2762528C1 |
| METHOD OF RECALL OF ORIGINAL FUNCTION AFTER ITS INTERCEPTION WITH SAVING OF STACK OF PARAMETERS | 2013 |
|
RU2546588C2 |
| SYSTEM AND METHOD OF SIMILAR FILES DETERMINING | 2015 |
|
RU2614561C1 |
| WEB PROPERTY MODIFICATION DETECTION SYSTEM AND METHOD | 2018 |
|
RU2702081C2 |
| SYSTEM AND METHOD OF CREATING ANTIVIRUS RECORD | 2018 |
|
RU2697954C2 |
