Patent ID: 7950057

Claim:
A system comprising: a processor; and a memory coupled to the processor, the memory having instructions stored therein which when executed by the processor perform a process comprising: determining a 64-bit driver load address of a driver being loaded; and determination whether said driver load address is in a system service dispatch table (SSDT) addressable area, wherein upon a determination that said driver load address is in said SSDT addressable area, determining whether said driver is authorized to be in said SSDT addressable area; and determining whether a driver load function call to a driver load function has been made, wherein upon a determination that said driver load function call has been made, said method further comprising stalling said driver load function call; wherein upon a determination that said driver load address is in said SSDT addressable area and that said driver is authorized to be in said SSDT addressable area, said method further comprising allowing said driver load function call to proceed.