AUTOMATICALLY PROTECTING COMPUTER SYSTEMS FROM ATTACKS THAT EXPLOIT SECURITY VULNERABILITIES

摘要

The present invention relates to the field of computer system security. The present invention especially relates to methods and computer programs for automatically protecting a computer system from attacks that exploit security vulnerabilities. A first method for automatically protecting a computer system from attacks that exploit security vulnerabilities comprises the steps of detecting requests for the execution of code portions, determining vulnerabilities of a code portion for which an execution request is detected, evaluating whether or not the execution of the code portion shall be prevented in case that at least one vulnerability concerning the code portion is determined and preventing the execution of the code portion if determined to do so in the evaluation step. A second method for automatically protecting a computer system from attacks that exploit security vulnerabilities, comprises the steps of detecting code portions which are currently executed, determining vulnerabilities of a code portion which is currently executed, evaluating whether or not the execution of the code portion shall be aborted in case that at least one vulnerability concerning the code portion is determined and aborting the execution of the code portion if determined to do so in the evaluation step.