Patent ID: 11914699
Assignee: OPEN TEXT HOLDINGS, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A system for determining a trust level of a process associated with a call operation, comprising:
a processor; and
memory storing instructions that, when executed by the processor, causes the system to perform a set of operations, the set of operations comprising:
receiving a call operation associated with a process, the call operation having an associated call stack that stores a return address for the call operation;
responsive to receiving the call operation associated with the process, determining whether the process is known by a security service;
after receiving the call operation associated with the process and determining whether the process is known by a security service:
responsive to determining that the process is known by the security service, determining a trust level for the process and responsive to determining that the process is both known and trusted based on the trust level for the process, allowing the known process to execute the call operation;
responsive to determining that the process is unknown by the security service, determining whether the call operation is known by the security service, comprising accessing a data store to analyze the call stack;
responsive to determining that the process is unknown by the security service and that the call operation is known by the security service, evaluating the trust level of the call operation and responsive to determining that the called operation is both known and trusted based on the trust level of the call operation, trusting the unknown process and executing the call operation; and
responsive to determining that the process is unknown by the security service and that the call operation is unknown by the security service, not trusting the process and not executing the call operation.