利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

595 条记录 (耗时 0.062 秒)

    COMBINED SECURITY AND QOS COORDINATION AMONG DEVICES
    94.
    发明申请
    COMBINED SECURITY AND QOS COORDINATION AMONG DEVICES 审中-公开

    公开(公告)号：US20170359309A1

    公开(公告)日：2017-12-14

    申请号：US15619102

    申请日：2017-06-09

    申请人： Sophos Limited

    发明人： Dirk Bolte ,  Sven Schnelle ,  Emanuel Taube ,  Jonas von Andrian

    IPC分类号： H04L29/06 ,  H04W12/08 ,  H04W76/02 ,  H04W88/08

    摘要： A method includes establishing a wireless link between a wireless interface of an endpoint and a WAP; exchanging, through the wireless link, network traffic associated with execution of an application at the endpoint; executing, at the endpoint, a security routine to monitor a security status of the endpoint; establishing, through the wireless link, a secure channel that shares the wireless link with the network traffic of the application, the secure channel to extend from the security routine to a supervisor through the wireless link and the WAP; conveying, from the security routine and through the secure channel, an indication of the security status; receiving, at the security routine and through the secure channel, a command to change a setting of the wireless interface associated with a characteristic of the wireless link; and accessing, from the security routine, the wireless interface to effect the change in response to receiving the command.

    SERVER DRIFT MONITORING
    95.
    发明申请
    SERVER DRIFT MONITORING 审中-公开

    公开(公告)号：US20170346835A1

    公开(公告)日：2017-11-30

    申请号：US15681501

    申请日：2017-08-21

    申请人： Sophos Limited

    发明人： Andrew J. Thomas ,  Kenneth D. Ray ,  Mark D. Harris

    IPC分类号： H04L29/06

    CPC分类号： H04L63/1408 ,  H04L63/145 ,  H04L63/20

    摘要： Threat detection is improved by monitoring variations in observable events and correlating these variations to malicious activity. The disclosed techniques can be usefully employed with any attribute or other metric that can be instrumented on an endpoint and tracked over time including observable events such as changes to files, data, software configurations, operating systems, and so forth. Correlations may be based on historical data for a particular machine, or a group of machines such as similarly configured endpoints. Similar inferences of malicious activity can be based on the nature of a variation, including specific patterns of variation known to be associated with malware and any other unexpected patterns that deviate from normal behavior. Embodiments described herein use variations in, e.g., server software updates or URL cache hits on an endpoint, but the techniques are more generally applicable to any endpoint attribute that varies in a manner correlated with malicious activity.

    THREAT DETECTION USING URL CACHE HITS
    99.
    发明申请
    THREAT DETECTION USING URL CACHE HITS 有权
    使用URL CACHE HITS进行故障检测

    公开(公告)号：US20160173510A1

    公开(公告)日：2016-06-16

    申请号：US14570578

    申请日：2014-12-15

    申请人： Sophos Limited

    发明人： Mark D. Harris ,  Kenneth D. Ray

    IPC分类号： H04L29/06 ,  H04L29/08

    CPC分类号： G06F21/552 ,  H04L63/02 ,  H04L63/1416 ,  H04L63/20 ,  H04L67/2842

    摘要： Threat detection is improved by monitoring variations in observable events and correlating these variations to malicious activity. The disclosed techniques can be usefully employed with any attribute or other metric that can be instrumented on an endpoint and tracked over time including observable events such as changes to files, data, software configurations, operating systems, and so forth. Correlations may be based on historical data for a particular machine, or a group of machines such as similarly configured endpoints. Similar inferences of malicious activity can be based on the nature of a variation, including specific patterns of variation known to be associated with malware and any other unexpected patterns that deviate from normal behavior. Embodiments described herein use variations in, e.g., server software updates or URL cache hits on an endpoint, but the techniques are more generally applicable to any endpoint attribute that varies in a manner correlated with malicious activity.

    摘要翻译： 通过监测可观察事件的变化并将这些变化与恶意活动相关联来改善威胁检测。 所公开的技术可以有用地与任何属性或其他度量相关联，该属性或其他度量可被测量在端点上并随时间跟踪，包括可观察事件，例如对文件，数据，软件配置，操作系统等的改变。 相关性可以基于特定机器或一组机器的历史数据，例如类似配置的端点。 恶意活动的类似推断可以基于变体的性质，包括已知与恶意软件相关联的特定变异模式以及偏离正常行为的任何其他意外模式。 本文描述的实施例使用例如端点上的服务器软件更新或URL缓存命中的变化，但是这些技术更通常地适用于以与恶意活动相关的方式变化的任何端点属性。

    METHOD AND SYSTEM FOR DETECTING RESTRICTED CONTENT ASSOCIATED WITH RETRIEVED CONTENT
    100.
    发明申请
    METHOD AND SYSTEM FOR DETECTING RESTRICTED CONTENT ASSOCIATED WITH RETRIEVED CONTENT 有权
    用于检测与检索内容相关的限制内容的方法和系统

    公开(公告)号：US20150373037A1

    公开(公告)日：2015-12-24

    申请号：US14838973

    申请日：2015-08-28

    申请人： Sophos Limited

    发明人： Fraser Howard ,  Paul Baccas ,  Vanja Svajcer ,  Benjamin John Godwood ,  William James McCourt

    IPC分类号： H04L29/06

    CPC分类号： H04L63/1416 ,  G06F21/567 ,  G06F2221/034 ,  G06F2221/2115 ,  H04L63/102 ,  H04L63/12 ,  H04L63/1433 ,  H04L63/1441 ,  H04L63/145 ,  H04L63/20

    摘要： Techniques are described for detecting restricted content associated with retrieved content. A method and system includes receiving a client request for content, where the request includes an outbound network request from the client with a Uniform Resource Identifier (URI) containing a domain name, saving contextual information from the request, examining the request for compliance with a management policy, retrieving a content item responsive to the request, and analyzing the contextual information from the request and the content item to detect whether the content item includes restricted content from a list of restrictions in the management policy. A scanning facility may thus utilize the contextual information from the client request to aid in the detection of restricted content associated with retrieved content.

    摘要翻译： 描述了用于检测与检索到的内容相关联的受限内容的技术。 一种方法和系统包括接收对内容的客户端请求，其中请求包括来自客户端的带有包含域名的统一资源标识符（URI）的出站网络请求，从请求中保存上下文信息，检查对于 管理策略，响应于所述请求检索内容项，以及从所述请求和所述内容项分析所述上下文信息，以从所述管理策略中的限制列表中检测所述内容项是否包括受限内容。 因此，扫描设备可以利用来自客户端请求的上下文信息来帮助检测与检索到的内容相关联的受限内容。