METHOD OF PROTECTING SOFTWARE FROM UNDECLARED CAPABILITIES CONTAINED IN OBTAINED UPDATES Russian patent published in 2019 - IPC G06F21/57 

FIELD: computer equipment.

SUBSTANCE: invention relates to the computer equipment. Method of protecting software from undeclared capabilities contained in the obtained updates involves collecting network connection statistics and user activity prior to generating a test bench, generating user behavior profiles, based on the safety scanner report, downloading the update, if the update is critical, then it is installed on the test bench, if the update is not critical, then it is installed on the functioning system, in process of system functioning network connections are analyzed and abnormal behavior of users is detected, if abnormal network connections or abnormal behavior of user are detected during operation of system, then abnormal connection is broken and anomaly source is detected; by means of changing settings of the information security system, the detected abnormal connection or abnormal behavior of the user is changed by changing the system settings.

EFFECT: high reliability of detecting undeclared capabilities in obtained updates of network equipment software.

1 cl, 1 dwg