Patent ID: 7831838
Filing Date: 2010-11-09
Classification: G06F

Abstract:
1. A method implemented in a computing system of verifying integrity of a software module partially or fully loaded into memory of a computing environment for execution, comprising: a computing system verifying that said software module to be loaded has not been tampered with by using module-level verification; and upon verifying that the software module has not been tampered with, the computing system wherein said verifying that said software module to be loaded has not been tampered with by using module-level verification comprises taking a hash of the software module not incorporating changes made by an operating system loader and comparing the hash to a previously stored hash of the software module, wherein said creating at least two portion-level verifications comprises identifying two portions of the software module not incorporating changes made by an operating system loader and for each of at least two portions of the software module, modifying the portion to comprise loading changes implemented by an operating system loader in loading the portion, hashing the modified portion, and preserving the hash of the modified portion, wherein a first of the identified two portions of the software module contains secure functionality and a second of the identified two portions of the software module does not contain secure functionality, and wherein said using each of said portion-level verifications to verify a portion of said software module comprises: