中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

65 records (took 0.021 seconds)

    Optimizing malware recovery
    42.
    发明申请
    Optimizing malware recovery 审中-公开
    优化恶意软件恢复

    公开(公告)号：US20070006304A1

    公开(公告)日：2007-01-04

    申请号：US11172373

    申请日：2005-06-30

    Applicant: Michael Kramer ,  Scott Field ,  Marc Seinfeld

    Inventor： Michael Kramer ,  Scott Field ,  Marc Seinfeld

    IPC: G06F12/14

    CPC classification number: G06F21/554 ,  G06F21/55 ,  G06F21/568 ,  H04L63/1416 ,  H04L63/1441

    Abstract: Malware recovery optimization is provided in which malware detection processes and protocol processes on a device are monitored for events indicating a breach of security of the device, such as the presence of an infection or other evidence of a malware attack. The devices report the events for collection on a centralized event collector that issues alerts of the events to other devices that may have been compromised as a result of the breach of security. Upon receipt of the alert, the receiving devices may initiate malware recovery optimization, including activating anti-virus software to initiate a targeted scan of those resources that may have been compromised. In this manner, malware recovery processes are optimized to recover the receiving device and/or resources when indicated.

    Abstract translation: 提供了恶意软件恢复优化，其中监视设备上的恶意软件检测过程和协议进程，以指示违反设备安全性的事件，例如是否存在感染或其他恶意软件攻击证据。 这些设备会报告在集中式事件收集器上收集的事件，从而将事件的警报发送到可能由于违反安全性而受到威胁的其他设备。 在接收到警报之后，接收设备可以启动恶意软件恢复优化，包括激活防病毒软件以对可能已经被泄露的那些资源进行有针对性的扫描。 以这种方式，恶意软件恢复过程被优化以在指示时恢复接收设备和/或资源。

    Tagging obtained content for white and black listing
    43.
    发明申请
    Tagging obtained content for white and black listing 有权

    公开(公告)号：US20060230452A1

    公开(公告)日：2006-10-12

    申请号：US11450608

    申请日：2006-06-09

    Applicant: Scott Field

    Inventor： Scott Field

    IPC: G06F12/14

    CPC classification number: G06F21/56 ,  G06F21/562

    Abstract: A system and method for providing enhanced security with regard to obtained files is presented. Upon obtaining a file from an external location, the obtained file is tagged with tagging information regarding the origin of the obtained file. Additionally, an operating system suitable for execution on a computing device is also presented. The operating system includes at least one application-callable function (API) for obtaining content from an external location. Each application-callable function for obtaining content from an external location is configured to associate tagging information with each obtained file, the tagging information comprising the origin of the obtained file. The origin of the obtained file can be used for subsequent security policy decisions, such as whether to allow or block execution or rendering of the content, as well as whether the content will be accessed in a constrained environment such as a “sandbox” or virtual machine.

    Methods and systems for protecting information in paging operating systems
    47.
    发明申请
    Methods and systems for protecting information in paging operating systems 有权

    公开(公告)号：US20050262342A1

    公开(公告)日：2005-11-24

    申请号：US11190376

    申请日：2005-07-26

    Applicant: Scott Field

    Inventor： Scott Field

    IPC: G06F12/12 ,  G06F12/14 ,  G06F21/00

    CPC classification number: G06F12/14 ,  G06F12/126 ,  G06F21/6218 ,  G06F21/78

    Abstract: The inventive methods and systems provide an approach to protecting unencrypted sensitive information from being paged out to secondary storage, such as a hard disk, during paging operations. In the described embodiment, a key is provided and is maintained in the main memory of a virtual memory system. Measures are taken to protect the key such as page-locking the key in the main memory to ensure that it never gets paged out to the secondary storage. The described key is a desirably large key that is randomly generated by the operating system. When sensitive information is to be placed in the main memory, it is encrypted with the page-locked key. The encrypted sensitive information can then be paged out to secondary storage without concern about its security. When the encrypted sensitive information is needed by a process or application, it is retrieved from secondary storage and decrypted using the page-locked key. For further protection, the sensitive information can be decrypted into a page-locked page of main memory. More than one key can be used to encrypt and/or decrypt the sensitive information.

    Efficient white listing of user-modifiable files
    49.
    发明授权
    Efficient white listing of user-modifiable files 有权

    公开(公告)号：US10043008B2

    公开(公告)日：2018-08-07

    申请号：US10977484

    申请日：2004-10-29

    Applicant: Mihai Costea ,  Scott Field ,  Damodharan Ulagaratchagan

    Inventor： Mihai Costea ,  Scott Field ,  Damodharan Ulagaratchagan

    IPC: G06F21/56

    CPC classification number: G06F21/56 ,  G06F21/562

    Abstract: A system and method for efficiently determining that a received file is not malware is presented. In operation, when a file is received at a computing device, an evaluation is made as to whether the file includes user-modifiable, or superficial, data areas, i.e., areas of the file that by their nature do not typically carry or embed malware. If the file includes superficial data areas, those superficial data areas are filtered out and a file signature is generated based on the remaining portions of the received file. The file can then be compared to a list of know malware to determine if the file is malware. Alternatively, the file can be compared to a list of known, trusted files to determine whether the file is trustworthy.

Patent Agency Ranking