Patent ID: 7895650
Filing Date: 2011-02-22
Classification: G06F

Abstract:
1. A method for securing a process comprising: determining, using at least one computer processor, a level of risk associated with a first process, the level of risk based at least in part on static analysis of an executable file of the first process that identifies inter-process communication capabilities of the first process; receiving, using at least one computer processor, from the first process a request to access an object stored in computer readable memory, wherein receiving the request to access an object stored in computer readable memory comprises receiving a copy of the request sent by the first process to a destination other than a receiving destination; accessing an object risk profile of the object, the object risk profile comprising data indicating a level of risk of a second process that previously created or modified the stored object; determining whether the level of risk of the object risk profile is greater than the level of risk of a process risk profile of the first process; in the event that the level of risk of the object risk profile is greater than the level of risk of the process risk profile of the first process updating the process risk profile of the first process to reflect said level of risk reflected in the object risk profile; and deploying automatically, based at least in part on the updated process risk profile, a security measure to protect the first process.