MESSAGE SENDER AUTHENTICITY VALIDATION

    公开(公告)号:EP3238413A4

    公开(公告)日:2018-05-23

    申请号:EP15874065

    申请日:2015-11-29

    申请人: MCAFEE INC

    IPC分类号: H04L29/06 H04L12/58

    摘要: In an example, a system and method are provided for validating the sender of a message, such as an e-mail, text message, voice mail, network message, internet posting, or other electronic message. An authenticity server engine may first prescreen the message with anti-spam, anti-malware, and other filters. The screened message is then provided to the end user. If the end user deems the message suspicious, he may request additional validation. The authenticity server engine may then apply an example four-phase validation scheme, including analyzing header data for consistency with the message body, analyzing public data sources, analyzing private data sources, and receiving a result of an off-channel challenge to the sender. The server may then assign the message a sender validity confidence score.

    MESSAGE SENDER AUTHENTICITY VALIDATION
    8.
    发明公开
    MESSAGE SENDER AUTHENTICITY VALIDATION 审中-公开
    消息发送者真实性验证

    公开(公告)号:EP3238413A1

    公开(公告)日:2017-11-01

    申请号:EP15874065.4

    申请日:2015-11-29

    申请人: McAfee, Inc.

    IPC分类号: H04L29/06 H04L12/58

    摘要: In an example, a system and method are provided for validating the sender of a message, such as an e-mail, text message, voice mail, network message, internet posting, or other electronic message. An authenticity server engine may first prescreen the message with anti-spam, anti-malware, and other filters. The screened message is then provided to the end user. If the end user deems the message suspicious, he may request additional validation. The authenticity server engine may then apply an example four-phase validation scheme, including analyzing header data for consistency with the message body, analyzing public data sources, analyzing private data sources, and receiving a result of an off-channel challenge to the sender. The server may then assign the message a sender validity confidence score.

    摘要翻译: 在一个示例中,提供了用于验证诸如电子邮件,文本消息,语音邮件,网络消息,网络发布或其他电子消息的消息的发送者的系统和方法。 真实性服务器引擎可以首先用反垃圾邮件,反恶意软件和其他过滤器预先筛选消息。 屏蔽的消息然后被提供给最终用户。 如果最终用户认为该消息可疑,他可以要求额外的验证。 然后,真实性服务器引擎可以应用示例四阶段验证方案,包括分析头部数据以与消息主体一致,分析公共数据源,分析私人数据源以及向发件人接收信道外挑战的结果。 服务器然后可以将该消息分配给发送者有效性置信度分数。

    IDENTIFICATION OF MALICIOUS EXECUTION OF A PROCESS
    9.
    发明公开
    IDENTIFICATION OF MALICIOUS EXECUTION OF A PROCESS 审中-公开
    鉴定一个过程的恶意执行

    公开(公告)号:EP3238410A1

    公开(公告)日:2017-11-01

    申请号:EP15874025.8

    申请日:2015-11-25

    申请人: McAfee, Inc.

    发明人: DALCHER, Greg W.

    IPC分类号: H04L29/06

    摘要: Particular embodiments described herein provide for an electronic device that can be configured to intercept a process, store execution profiling for the process if the process involves a privileged resource or a privileged operation, and analyze the code involved in each stack frame to determine malicious activity. If the process does not involve a privileged resource or a privileged operation, then the process is not analyzed.

    摘要翻译: 这里描述的特定实施例提供了一种电子设备,该电子设备可以被配置为拦截进程,如果进程涉及特权资源或特权操作则存储进程的执行概况分析,并且分析涉及每个堆栈帧的代码以确定恶意活动。 如果进程不涉及特权资源或特权操作,则不分析进程。

    TRUST ESTABLISHMENT BETWEEN A TRUSTED EXECUTION ENVIRONMENT AND PERIPHERAL DEVICES
    10.
    发明公开
    TRUST ESTABLISHMENT BETWEEN A TRUSTED EXECUTION ENVIRONMENT AND PERIPHERAL DEVICES 审中-公开
    可信执行环境与外围设备之间的信任建立

    公开(公告)号:EP3238372A1

    公开(公告)日:2017-11-01

    申请号:EP15873989.6

    申请日:2015-11-24

    申请人: McAfee, Inc.

    IPC分类号: H04L9/32 H04L9/08

    摘要: Technologies are provided in embodiments to establish trust between a trusted execution environment (TEE) and a peripheral device. Embodiments are configured to communicate with an attestation server to generate an encryption key, and to establish, using the encryption key, a secure connection with an authentication server to enable communication between the authentication server and the peripheral device. Embodiments are also configured to receive a pairwise master key if the peripheral device is authenticated and to receive a trusted communication from the peripheral device based, at least in part, on the pairwise master key. Embodiments may also be configured to identify a connection to the peripheral device before the peripheral device is authenticated to the authentication server, receive an identifier from the peripheral device, and establish a connection to an attestation server based on at least a portion of the identifier.

    摘要翻译: 在实施例中提供了用于建立可信执行环境(TEE)与外围设备之间的信任的技术。 实施例被配置为与证明服务器通信以生成加密密钥,并且使用加密密钥建立与认证服务器的安全连接以实现认证服务器与外围设备之间的通信。 实施例还被配置为如果外围设备被认证则接收成对主密钥并且至少部分地基于成对主密钥来接收来自外围设备的可信通信。 实施例还可以被配置为在外围设备向认证服务器认证之前识别到外围设备的连接,从外围设备接收标识符并且基于标识符的至少一部分建立到认证服务器的连接。