Patent ID: 9703957
Date: 2017-07-11
CPC Classifications: G06F,H04L

Claim:
1. A method for detecting memory modifications, comprising: allocating a contiguous block of a memory of an electronic device, the electronic device comprising a plurality of processing cores; loading instructions for detecting memory modifications into the contiguous block of memory; disabling the operation of an operating system of the electronic device by disabling one or more of system interrupts, user interrupts, or scheduler timer interrupts; disabling all but one of the plurality of processing cores of the electronic device, the remaining processing core executing the instructions for detecting memory modifications; scanning the memory of the electronic device for modifications performed by malware, after disabling all but one of the plurality of processing cores and disabling one or more of system interrupts, user interrupts, or scheduler timer interrupts; enabling the one or more of the system interrupts, user interrupts, or scheduler timer interrupts that were disabled, after scanning the memory of the electronic device for modifications; and enabling the processing cores that were disabled, after scanning the memory of the electronic device for modifications.