Patent ID: 8732839

Claim:
A method for automatically protecting a computer system from attacks that exploit security vulnerabilities, comprising: detecting requests for execution of code portions; determining vulnerabilities of a code portion, for which an execution request is detected, providing a secure history determination result indicating whether or not a parameter set used to call the code portion was used before the publication of an oldest vulnerability of the code portion; evaluating whether or not the execution of the code portion shall be prevented in a case at least one vulnerability concerning the code portion is determined; and preventing the execution of the code portion if determined to do so in the evaluating, wherein the evaluating is based on the secure history determination result, wherein one or more parameter test procedures are defined, whereby each parameter test procedure of the one or more parameter test procedures is specific to a different one of said vulnerabilities and provides a result value when executed that indicates if a parameter set used to call the code portion exploits this vulnerability or not, and wherein the evaluating is based on one or more of said result values of the one or more parameter test procedures.