Patent ID: 8707436

Claim:
A computer-implemented method, comprising: receiving code at a computer system; and using a processor, detecting malware designed to infiltrate the computer system without consent of a user of the computer system, wherein detecting malware is based on a definition of a portion of said code according to at least one functional operation embedded in said portion of said code, wherein the definition defines the portion of said code without requiring consideration of semantics of said portion of said code, wherein said definition of said portion of said code according to at least one functional operation embedded in said portion of said code is based on providing said portion of said code into an operational list comprising said at least one functional operation, wherein said definition of said portion of said code according to at least one functional operation embedded in said portion of said code is based on: generating an object list, said object list comprising a name for said at least one functional operation based on said object type; combining a portion of said object list with a portion of said operation list into a concatenated list; identifying at least one input and at least one output in said concatenated list; and utilizing said at least one functional operation of said at least one input and said at least one output to define said portion of said code.