公开(公告)号：US12086249B2

公开(公告)日：2024-09-10

申请号：US16777056

申请日：2020-01-30

Applicant: INDUSTRIAL TECHNOLOGY RESEARCH INSTITUTE

Inventor： Tzi-Cker Chiueh ,  Lap-Chung Lam ,  Li-Ting Huang ,  Pan-Jo Chuang

IPC: G06F21/56 ,  G06F8/65

CPC classification number: G06F21/566 ,  G06F8/65 ,  G06F2221/033

Abstract: A detection system for determining whether an update of at least one application installed on at least one whitelisted host is legitimate is provided. The system includes an update management server and update detectors installed with the application(s). During a process that software automatic update occurs in each update detector and a corresponding update installation package is executed, the executed update installation package generates at least one updater corresponding to each application. Each update detector transmits report information which includes the information of the at least one updater and sampled executable files to the update management server. The update management server obtains a number of update detectors, having performed the update operation of each application, according to the report information of each update detector. If the number is greater than or equal to a threshold value, it is determined that the update is legitimate.

公开(公告)号：US11113391B2

公开(公告)日：2021-09-07

申请号：US16356880

申请日：2019-03-18

Applicant: INDUSTRIAL TECHNOLOGY RESEARCH INSTITUTE

Inventor： Lap Chung Lam ,  Pan-Jo Chuang ,  Li-Ting Huang ,  Tzy-Shiah Wang ,  Chuan-Yu Cho ,  Tzi-Cker Chiueh

IPC: G06F21/00 ,  G06F21/54

Abstract: A method for preventing malicious software from attacking files of a computer system includes the following steps. Whether a file type of a specific file corresponding to an input/output (I/O) request is a to-be-backed-up file type is checked, wherein the to-be-backed-up file type belongs to one of multiple predetermined file types susceptible to malicious software attack. When the file type of the specific file is the to-be-backed-up file type, a backup already tag in a file context tag structure of the specific file is checked. When the backup already tag shows that the specific file has not been backed up, a backup process is performed for the specific file.