An automated analysis system detects malicious code within a computer system by generating and subsequently analyzing a behavior pattern for each computer program introduced to the computer system. Generation of the behavior pattern is accomplished by a virtual machine invoked within the computer system....http://www.google.com/patents/US7093239?utm_source=gb-gplus-sharePatent US7093239 - Computer immune system and method for detecting unwanted code in a computer system
