Patent ID: 9424425
Filing Date: 2016-08-23
CPC Classification: G06F,H04L

Claim Text:
1. A method comprising: launching an anti-malware process associated with an anti-malware drive; verifying the anti-malware process based at least in part on certificates contained in the anti-malware driver; responsive to extracting the certificates from the anti-malware driver, registering the certificates with an operating system; assigning a protection level defined by a signer and a protection type to the process based at least in part on said verification of the anti-malware process, wherein the anti-malware process has a higher protection level if both the signer and the protection type associated with the anti-malware process have a higher protection level than a signer and a protection type associated with another process; and preventing the user from altering the anti-malware process, the altering including terminating the anti-malware process, injecting code, or loading binaries related to the anti-malware process.