利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

61 条记录 (耗时 0.037 秒)

    System and method for malware and network reputation correlation
    11.
    发明授权
    System and method for malware and network reputation correlation 有权
    恶意软件和网络信誉相关的系统和方法

    公开(公告)号：US09122877B2

    公开(公告)日：2015-09-01

    申请号：US13052739

    申请日：2011-03-21

    申请人： Dmitri Alperovitch ,  Sven Krasser

    发明人： Dmitri Alperovitch ,  Sven Krasser

    IPC分类号： H04L29/06 ,  G06F21/57

    CPC分类号： H04L63/145 ,  G06F17/30106 ,  G06F21/577 ,  G06F2221/034 ,  H04L63/14 ,  H04L2463/144

    摘要： A method is provided in one example embodiment and includes receiving a reputation value based on a hash of a file making a network connection and on a network address of a remote end of the network connection. The network connection may be blocked if the reputation value indicates the hash or the network address is associated with malicious activity. In more specific embodiments, the method may also include sending a query to a threat analysis host to request the reputation value. Additionally or alternatively the reputation value may be based on query patterns in particular embodiments. In yet more specific embodiments, the network connection may be an inbound connection and/or an outbound connection, and the reputation value may be based on a file reputation associated with the hash and a connection reputation associated with the network address of the remote end of the network connection.

    摘要翻译： 在一个示例实施例中提供了一种方法，并且包括基于构成网络连接的文件的散列以及网络连接的远程端的网络地址来接收信誉值。 如果信誉值指示哈希或网络地址与恶意活动相关联，则可能会阻止网络连接。 在更具体的实施例中，该方法还可以包括向威胁分析主机发送查询请求信誉值。 附加地或替代地，信誉值可以基于特定实施例中的查询模式。 在更具体的实施例中，网络连接可以是入站连接和/或出站连接，并且信誉值可以基于与散列相关联的文件信誉以及与远程端的网络地址相关联的连接信誉 网络连接。

    SYSTEM AND METHOD FOR MALWARE AND NETWORK REPUTATION CORRELATION
    13.
    发明申请
    SYSTEM AND METHOD FOR MALWARE AND NETWORK REPUTATION CORRELATION 有权

    公开(公告)号：US20130247201A1

    公开(公告)日：2013-09-19

    申请号：US13052739

    申请日：2011-03-21

    申请人： Dmitri Alperovitch ,  Sven Krasser

    发明人： Dmitri Alperovitch ,  Sven Krasser

    IPC分类号： G06F21/20

    CPC分类号： H04L63/145 ,  G06F17/30106 ,  G06F21/577 ,  G06F2221/034 ,  H04L63/14 ,  H04L2463/144

    摘要： A method is provided in one example embodiment and includes receiving a reputation value based on a hash of a file making a network connection and on a network address of a remote end of the network connection. The network connection may be blocked if the reputation value indicates the hash or the network address is associated with malicious activity. In more specific embodiments, the method may also include sending a query to a threat analysis host to request the reputation value. Additionally or alternatively the reputation value may be based on query patterns in particular embodiments. In yet more specific embodiments, the network connection may be an inbound connection and/or an outbound connection, and the reputation value may be based on a file reputation associated with the hash and a connection reputation associated with the network address of the remote end of the network connection.

    Message profiling systems and methods
    14.
    发明授权
    Message profiling systems and methods 有权
    消息分析系统和方法

    公开(公告)号：US08132250B2

    公开(公告)日：2012-03-06

    申请号：US11173941

    申请日：2005-07-01

    申请人： Paul Judge ,  Guru Rajan ,  Dmitri Alperovitch ,  Matt Moyer ,  Sven Krasser

    发明人： Paul Judge ,  Guru Rajan ,  Dmitri Alperovitch ,  Matt Moyer ,  Sven Krasser

    IPC分类号： G06F15/16

    CPC分类号： G06Q10/107 ,  H04L51/12

    摘要： Methods and systems for operation upon one or more data processors that classify communications from messaging entities. A method can include receiving a communication that was sent from a messaging entity. A plurality of message classification techniques is used to classify the communication. Each message classification technique is associated with a confidence value which is used in generating a message classification output from the message classification technique. The message classification outputs are combined in order to generate a message profile score. The message profile score is used in deciding what action is to be taken with respect to the communication associated with the messaging entity.

    摘要翻译： 用于对一个或多个数据处理器进行操作的方法和系统，用于对通信实体进行分类。 一种方法可以包括接收从消息传送实体发送的通信。 使用多种消息分类技术对通信进行分类。 每个消息分类技术与用于从消息分类技术生成消息分类输出中使用的置信度值相关联。 消息分类输出被组合以便生成消息简档得分。 消息简档分数用于决定对于与消息传递实体相关联的通信采取什么动作。

    REPUTATION BASED MESSAGE PROCESSING
    17.
    发明申请
    REPUTATION BASED MESSAGE PROCESSING 有权
    基于信誉的信息处理

    公开(公告)号：US20080184366A1

    公开(公告)日：2008-07-31

    申请号：US12020370

    申请日：2008-01-25

    申请人： Dmitri Alperovitch ,  Sven Krasser

    发明人： Dmitri Alperovitch ,  Sven Krasser

    IPC分类号： G06F15/16 ,  G06F21/00

    CPC分类号： H04L51/12 ,  G06F11/008

    摘要： Methods and systems for processing electronic communications based upon reputation. Reputation of an entity associated with the electronic communication can be generated. The communication can be placed in a queue based upon the reputation. The queued communication can be processed based upon updated information about the entity.

    摘要翻译： 基于声誉处理电子通信的方法和系统。 可以生成与电子通信相关联的实体的信誉。 通信可以根据信誉放在队列中。 可以基于关于实体的更新信息来处理排队的通信。