Patent Capital Group
Monitoring executed script for zero-day attack of malware
Embodiments are directed to hooking a call for a malware monitoring logic into a JavaScript API engine interpreter. Upon JavaScript being placed into heap memory, the malware monitoring logic can initiate an evaluation or analysis of the heap spray to determine whether the JavaScript includes malware or other malicious agents prior to execution of the JavaScript shell code. Upon execution of the JavaScript within the sandbox, the malware monitoring logic can initiate monitoring of the JavaScript using malware analysis and/or execution profiling techniques. Inferences can be made of the presence of malware based on a start and end time of the JavaScript execution.
McAfee, LLC
G G G
G06F G06F G06F
inventional inventional inventional
Lixin Xiaoning Lu Liangjun Ravi Kai Xiang Alexander Hua
Lu Li Deng Huang Sahita Huang Xu Shepsen Liu