摘要:
Disclosed are systems and methods for ensuring fault tolerance of antivirus protection realized in a virtual environment. An example method includes collecting, by a antivirus agent in a virtual machine, information about available security virtual machines that provide at least one or more resource-intensive methods of antivirus checking of programs running on the virtual machine; analyzing the collected information to determine a location of the virtual machine relative to the security virtual machines and determine priorities for each of the security virtual machines based on the location of the virtual machine relative; forming a list of the available security virtual machines according to the priorities of the security virtual machines to identify a primary security virtual machine; connecting the virtual machine to the primary security virtual machine; and requesting the primary security virtual machine to perform at least antivirus checking of one or more programs running on the virtual machine.
摘要:
Disclosed are a system and a method for protecting computer resources from unauthorized access. The system provides a library of handler functions that control access of applications to protected resources on a computer device. The system associates a security policy with the library to handler functions. The security policy specifies access rules for accessing protected resources by the applications. The system also modifies applications to access the library of handler functions instead of corresponding application program interface (API) functions of the computer device. When a handler function receives an API function call from a modified application, it may determine if the received API function call complies with the access rules. When the API function call complies with the access rules, the handler function performs the API function call from the application to the protected resources. When the API function call violates the access rules, the handler function block that API function call.
摘要:
Disclosed is a system and method for detecting fraudulent transactions. An example method includes receiving data relating to an electronic transaction, including at least one of user actions data and malware actions data; analyzing, the data to determine whether the electronic transaction is a possible fraudulent transaction based on a predetermined algorithm stored in an electronic memory; determining whether the possible fraudulent transaction is a legitimate electronic transaction; and adjusting the operating parameters of the predetermined algorithm if the hardware processor determines that the possible fraudulent transaction is a legitimate electronic transaction.
摘要:
Disclosed are systems and methods for prioritizing scan requests. An example method includes reserving, by a computer processor, one or more connections between a thin client and a virtual machine of a computer; when one or more of the reserved connections are not used for communicating on-access scan (OAS) requests or on-demand scan (ODS) requests, allocating said one or more reserved connections for communicating OAS or ODS requests between the thin client and the virtual machine; and when all the reserved connections are used for communicating OAS or ODS requests, and at least one reserved connection is used for communicating ODS requests, reallocating for communicating the OAS requests the at least one reserved connection used for communicating ODS request.