07530106 is referenced by 68 patents and cites 195 patents.

A system, method, and computer program product for secure rating of processes in an executable file for malware presence comprising: (a) detecting an attempt to execute a file on a computer; (b) performing an initial risk assessment of the file; (c) starting a process from code in the file; (d) analyzing an initial risk pertaining to the process and assigning an initial security rating to the process; (e) monitoring the process for the suspicious activities; (f) updating the security rating of the process when the process attempts to perform the suspicious activity; (g) if the updated security rating exceeds a first threshold, notifying a user and continuing execution of the process; and (h) if the updated security rating exceeds a second threshold, blocking the action and terminating the process.

Title
System and method for security rating of computer processes
Application Number
12/167138
Publication Number
7530106 (B1)
Application Date
July 2, 2008
Publication Date
May 5, 2009
Inventor
Mikhail A Pavlyushchik
Moscow
RU
Alexey V Monastyrsky
Moscow
RU
Nikolay A Grebennikov
Moscow
RU
Oleg V Zaitsev
Moscow
RU
Agent
Bardmesser Law Group
Assignee
Kaspersky Lab ZAO
RU
IPC
G06F 11/00
View Original Source