Browse Prior Art Database

A Method and System for Entity Resolution after Modification by a Benign Party based on Reversing an Effect of the Modification

IP.com Disclosure Number: IPCOM000234990D
Publication Date: 2014-Feb-21
Document File: 2 page(s) / 30K

Publishing Venue

The IP.com Prior Art Database

Abstract

A method and system is disclosed for resolving an entity after a modification to the entity by a benign party based on reversing an effect of the modification. Further, the effect of modification is reversed before calculating a fingerprint for the entity.

This text was extracted from a PDF file.
This is the abbreviated version, containing approximately 51% of the total text.

Page 01 of 2

A Method and System for Entity Resolution after Modification by a Benign Party based on Reversing an Effect of the Modification

In system management, a fingerprint of content of an entity can be used in recognizing the entity in a situation wherein, multiple copies of the entity are distributed among different systems. The fingerprint can also be used in identifying malware by identifying modifications to the content of the entity . However, in certain cases, a modification to the content of the entity is done by a benign party for reasons such as , but not limited to, optimizing dynamic loading performance, and providing moving target defense through obfuscation of the original entity. In such a case, resolving whether the modification was done by the benign party or malware becomes a challenge .

Additionally due to the modification the entity may now be represented by another fingerprint. Therefore, there is a need for resolving the entity as the same entity after modification by the benign party.

Disclosed is a method and system for resolving an entity after a modification to the content of the entity by a benign party based on reversing an effect of the modification . Further, the effect of modification is reversed before calculating a fingerprint for the entity.

The method and system firstly registers the modification with an application such as , but not limited to, a plug-in, and a trusted third party. The method and system thereafter, reverses the effect of the modification before calculating the fingerprint for...