Patent ID: 7793346
Filing Date: 2010-09-07
Classification: G06F,H04L

Abstract:
1. A method for preventing unauthorized program modules from communicating, comprising: identifying at least one program module utilizing a central processing unit call history by intercepting a function, the central processing unit call history including a history of a plurality of calls in the form of a stack trace; performing an authorization test on the at least one program module for preventing unauthorized program modules from communicating; and determining whether an application program associated with the at least one program module is authorized based on a stack context of the function; wherein if the application program is authorized only in part: wherein a signature is used to determine whether the at least one program module is authorized; wherein the signature includes a calculated signature associated with the at least one program module, and the calculated signature is compared to an earlier-stored signature stored in a database and associated with the at least one program module.