BEHAVIORAL TRACKING SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR UNDOING EVENTS BASED ON USER INPUT
    1.
    发明申请
    BEHAVIORAL TRACKING SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR UNDOING EVENTS BASED ON USER INPUT 有权
    基于用户输入的行为跟踪事件的行为跟踪系统,方法和计算机程序产品

    公开(公告)号:US20130276107A1

    公开(公告)日:2013-10-17

    申请号:US12876037

    申请日:2010-09-03

    IPC分类号: G06F21/00

    摘要: A behavioral tracking system, method, and computer program product are provided for undoing events based on user input. In use, a plurality of unclassified events is identified on a system utilizing behavioral tracking. Additionally, input associated with at least one of the unclassified events is received from a user of the system for classifying the at least one of the unclassified events as an unwanted event. Further, the at least one unwanted event is undone in response to the receipt of the input.

    摘要翻译: 提供行为跟踪系统,方法和计算机程序产品,用于根据用户输入撤消事件。 在使用中,在使用行为跟踪的系统上识别多个未分类的事件。 另外,从系统的用户接收与至少一个未分类事件相关联的输入,用于将未分类事件中的至少一个分类为不需要的事件。 此外,响应于输入的接收,至少一个不需要的事件被撤销。

    SYSTEMS AND METHODS FOR MALWARE DETECTION AND REMEDIATION
    2.
    发明申请
    SYSTEMS AND METHODS FOR MALWARE DETECTION AND REMEDIATION 审中-公开
    用于恶意软件检测和恢复的系统和方法

    公开(公告)号:US20160180087A1

    公开(公告)日:2016-06-23

    申请号:US14580784

    申请日:2014-12-23

    IPC分类号: G06F21/56

    摘要: Provided in some embodiments are systems and methods for remediating malware. Embodiments include receiving (from a process) a request to access data, determining that the process is an unknown process, providing the process with access to one or more data tokens in response to determining that the process is an unknown process, determining whether the process is engaging in suspicious activity with the one or more data tokens, and inhibiting execution of the process in response to determining that the process is engaging in suspicious activity with the one or more data tokens.

    摘要翻译: 在一些实施例中提供了用于修复恶意软件的系统和方法。 实施例包括:(从处理)接收访问数据的请求,确定该进程是未知进程,响应于确定该进程是未知进程,向该进程提供对一个或多个数据令牌的访问,确定进程 正在与一个或多个数据令牌进行可疑活动,并且响应于确定该进程与一个或多个数据令牌进行可疑活动而禁止该进程的执行。

    System, method, and computer program product for removing malware from a system while the system is offline
    3.
    发明授权
    System, method, and computer program product for removing malware from a system while the system is offline 有权
    系统,方法和计算机程序产品,用于在系统脱机时从系统中删除恶意软件

    公开(公告)号:US08776233B2

    公开(公告)日:2014-07-08

    申请号:US12896734

    申请日:2010-10-01

    IPC分类号: G06F21/00

    摘要: A system, method, and computer program product are provided for removing malware from a system while the system is offline. In use, a system is identified as being infected with malware. Additionally, it is determined whether the malware can be fully removed from the system while the system is online. Further, at least part of the malware is conditionally removed from the system while the system is offline, based on the determining.

    摘要翻译: 提供系统,方法和计算机程序产品,用于在系统脱机时从系统中删除恶意软件。 在使用中,系统被识别为被恶意软件感染。 此外,确定系统在线时是否可以从系统中完全删除恶意软件。 此外,基于确定,至少部分恶意软件在系统脱机时有条件地从系统中移除。

    Behavioral tracking system, method, and computer program product for undoing events based on user input
    4.
    发明授权
    Behavioral tracking system, method, and computer program product for undoing events based on user input 有权
    行为跟踪系统,方法和计算机程序产品,用于根据用户输入撤消事件

    公开(公告)号:US08752171B2

    公开(公告)日:2014-06-10

    申请号:US12876037

    申请日:2010-09-03

    IPC分类号: G06F11/00

    摘要: A behavioral tracking system, method, and computer program product are provided for undoing events based on user input. In use, a plurality of unclassified events is identified on a system utilizing behavioral tracking. Additionally, input associated with at least one of the unclassified events is received from a user of the system for classifying the at least one of the unclassified events as an unwanted event. Further, the at least one unwanted event is undone in response to the receipt of the input.

    摘要翻译: 提供行为跟踪系统,方法和计算机程序产品,用于根据用户输入撤消事件。 在使用中,在使用行为跟踪的系统上识别多个未分类的事件。 另外,从系统的用户接收与至少一个未分类事件相关联的输入,用于将未分类事件中的至少一个分类为不需要的事件。 此外,响应于输入的接收,至少一个不需要的事件被撤销。

    BEHAVIORAL TRACKING SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR UNDOING EVENTS BASED ON USER INPUT
    6.
    发明申请
    BEHAVIORAL TRACKING SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR UNDOING EVENTS BASED ON USER INPUT 有权
    基于用户输入的行为跟踪事件的行为跟踪系统,方法和计算机程序产品

    公开(公告)号:US20140359762A1

    公开(公告)日:2014-12-04

    申请号:US14300758

    申请日:2014-06-10

    IPC分类号: G06F21/55

    摘要: A behavioral tracking system, method, and computer program product are provided for undoing events based on user input. In use, a plurality of unclassified events is identified on a system utilizing behavioral tracking. Additionally, input associated with at least one of the unclassified events is received from a user of the system for classifying the at least one of the unclassified events as an unwanted event. Further, the at least one unwanted event is undone in response to the receipt of the input.

    摘要翻译: 提供行为跟踪系统,方法和计算机程序产品,用于根据用户输入撤消事件。 在使用中,在使用行为跟踪的系统上识别多个未分类的事件。 另外,从系统的用户接收与至少一个未分类事件相关联的输入,用于将未分类事件中的至少一个分类为不需要的事件。 此外,响应于输入的接收,至少一个不需要的事件被撤销。

    SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR REMOVING MALWARE FROM A SYSTEM WHILE THE SYSTEM IS OFFLINE
    8.
    发明申请
    SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR REMOVING MALWARE FROM A SYSTEM WHILE THE SYSTEM IS OFFLINE 有权
    系统,方法和计算机程序产品用于在系统离线时从系统中删除恶意软件

    公开(公告)号:US20130276113A1

    公开(公告)日:2013-10-17

    申请号:US12896734

    申请日:2010-10-01

    IPC分类号: G06F11/00

    摘要: A system, method, and computer program product are provided for removing malware from a system while the system is offline. In use, a system is identified as being infected with malware. Additionally, it is determined whether the malware can be fully removed from the system while the system is online. Further, at least part of the malware is conditionally removed from the system while the system is offline, based on the determining.

    摘要翻译: 提供系统,方法和计算机程序产品,用于在系统脱机时从系统中删除恶意软件。 在使用中,系统被识别为被恶意软件感染。 此外,确定系统在线时是否可以从系统中完全删除恶意软件。 此外,基于确定,至少部分恶意软件在系统脱机时有条件地从系统中移除。

    DETERMINING A REPUTATION FOR A PROCESS
    10.
    发明申请
    DETERMINING A REPUTATION FOR A PROCESS 审中-公开
    确定一个过程的一个信号

    公开(公告)号:US20160182550A1

    公开(公告)日:2016-06-23

    申请号:US14581439

    申请日:2014-12-23

    申请人: Joel R. Spurlock

    发明人: Joel R. Spurlock

    IPC分类号: H04L29/06 G06F21/56

    摘要: Particular embodiments described herein provide for an electronic device that can be configured to identify a process running on the electronic device, assign a reputation to the process if the process has a known reputation, determine if the process includes executable code, determine a reputation for the executable code, and combine the reputation for the executable code with the reputation assigned to the process to create a new reputation for the process.

    摘要翻译: 本文描述的特定实施例提供了一种电子设备,其可以被配置为识别在电子设备上运行的过程,如果过程具有已知声誉,则向该过程分配信誉,确定该过程是否包括可执行代码, 可执行代码,并将可执行代码的声誉与分配给进程的声誉相结合,为进程创建新的声誉。