Patent ID: 9009474
Filing Date: 2015-04-14
Classification: G06F,H04L

Abstract:
1. A method of examining data within a computing device implementing an operating system configured in multiple layers to detect data modification, said computing device having multiple processors and memory segregated into kernel space and user space, the method comprising configuring said multiple processors to perform processes of: determining, by the computing device, a plurality of primary outbound content indicators of outbound data at said user space, wherein said primary outbound content indicators are selected from a set of different indicator types; determining a plurality of secondary outbound content indicators of said outbound data at said kernel space, wherein said secondary outbound content indicators are selected from said set of different indicator types; sequentially correlating within said computing device, for each layer starting with a first layer, said primary outbound content indicators with corresponding secondary outbound content indicators, wherein a primary outbound content indicator and a corresponding secondary outbound content indicator have a common indicator type from among said set of different indicator types; and determining flow integrity of said outbound data between successive layers of said computing device according to a result of said correlating.