Patent ID: 9536090
Date: 2017-01-03
CPC Classifications: G06F

Claim:
1. A method of defending a computer from malware, comprising: (a) identifying first executable code, of the computer, that includes a signature that identifies an address, in a memory of the computer, of a respective data structure that is potentially vulnerable to tampering by the malware; (b) providing, after said identifying, to the computer, second executable code that emulates said first executable code; (c) modifying, after said providing, a portion of said first executable code so that when the modified first executable code is executed, said first executable code jumps to said second executable code before accessing said respective data structure of said first executable code; and (d) replacing, after said identifying, in said first executable code, said address of said respective data structure with a second address other than said address of said respective data structure so that said signature identifies said second address, wherein said replacing is with an address of a guard page in said memory of the computer.