Patent ID: 7526654
Filing Date: 2009-04-28
Classification: G06F

Abstract:
1. A method of detecting unauthorized executable code resident in a computer system, the method comprising: receiving user authorization information; authenticating the user authorization information to perform at least one of authorize and identify a user; when the user is at least one of authorized or identified, requesting security data of the user; hashing first data stored in data storage within the computer system using a selected hashing process to determine a computed hash value, wherein the first data includes data representing a current state of at least one application executing within the computer system; retrieving a trusted hash value, wherein the trusted hash value was created using the selected hashing process applied to second data representing a secure state of the one or more applications executing in the computer system, wherein the second data includes a system memory location indicative of the at least one application executing within the computer system; and comparing the computed hash value with the trusted hash value to determine whether there is unauthorized executable code in the computer system.