Patent ID: 11971986
Assignee: ACRONIS INTERNATIONAL GMBH
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 8:
9. A system for restricting access to protected resources, the system comprising:
a hardware processor configured to:
in response to identifying a plurality of program data in an installation directory of a security application in a storage of a computing device, designate the plurality of program data installed on a computing system as protected program data;
intercept, by a kernel mode driver associated with the security application, a request from an untrusted application executing on the computing system to alter at least one of the protected program data;
classify, by a self-defense service associated with the security application, the untrusted application as a malicious application based on information in the intercepted request and characteristics of the untrusted application; and
responsive to classifying the untrusted application as a malicious application, deny, by the kernel mode driver, access to the at least one of the protected program data.