公开(公告)号：US08706745B1

公开(公告)日：2014-04-22

申请号：US12130839

申请日：2008-05-30

申请人： Shaun Cooley ,  William E. Sobel ,  Bruce McCorkendale

发明人： Shaun Cooley ,  William E. Sobel ,  Bruce McCorkendale

IPC分类号： G06F7/00 ,  G06F17/30

CPC分类号： G06F21/564

摘要： A computer-implemented method for determining a file set may include identifying a file set and identifying a key file for the file set. The method may also include transmitting a key-file identifier to a second computing system. A first computing system may receive first and second file identifiers from a second computing system. The first computing system may determine whether the file set comprises a file identified by the first file identifier, and whether the file set comprises a file identified by the second file identifier. The method also includes transmitting a result of the determination to the second computing system. A method for determining a file set on a second computing device is also disclosed. Corresponding systems and computer-readable media are also disclosed.

摘要翻译： 用于确定文件集的计算机实现的方法可以包括识别文件集并且识别文件集的密钥文件。 该方法还可以包括将密钥文件标识符发送到第二计算系统。 第一计算系统可以从第二计算系统接收第一和第二文件标识符。 第一计算系统可以确定文件集是否包括由第一文件标识符标识的文件，以及文件集是否包括由第二文件标识符标识的文件。 该方法还包括将确定的结果发送给第二计算系统。 还公开了一种用于确定在第二计算设备上的文件集的方法。 还公开了相应的系统和计算机可读介质。

公开(公告)号：US08856921B1

公开(公告)日：2014-10-07

申请号：US11864768

申请日：2007-09-28

申请人： Bruce McCorkendale ,  William E. Sobel ,  Mark Spiegel ,  Shaun Cooley

发明人： Bruce McCorkendale ,  William E. Sobel ,  Mark Spiegel ,  Shaun Cooley

IPC分类号： G06F11/00

CPC分类号： G06F21/564

摘要： Threat emergence dates as well as file modification and scanning history are tracked to determine which files need to be scanned for possible infection by various attacking agents. Information concerning which scan engines are used to scan for the presence of different attacking agents is also tracked. Where given files only need to be scanned for a subset of all possible threats and the relevant scanning code resides in only a subset of all the scan engines, only the required scan engines are initialized, loaded or called in order to scan those files.

摘要翻译： 跟踪威胁出现日期以及文件修改和扫描历史，以确定哪些文件需要被各种攻击代理人可能的感染扫描。 还跟踪了哪些扫描引擎用于扫描不同攻击剂的存在的信息。 在给定文件只需要扫描所有可能的威胁的一个子集的情况下，相关扫描代码仅驻留在所有扫描引擎的一个子集中，只有所需的扫描引擎被初始化，加载或调用才能扫描这些文件。

公开(公告)号：US08214907B1

公开(公告)日：2012-07-03

申请号：US12036773

申请日：2008-02-25

申请人： William E. Sobel ,  Shaun Cooley

发明人： William E. Sobel ,  Shaun Cooley

IPC分类号： G06F12/14

CPC分类号： H04L63/1416 ,  G06F21/51 ,  G06F2221/2119

摘要： Client computers track visited websites and monitor confidential information transmitted to the visited websites. Upon subsequent identification of a website as malicious or compromised, it is determined whether the unsecure website was visited, and if so, whether any confidential information was exposed to the unsecure website. Clients compile statistical reports concerning confidential information transmitted to unsecure websites, and provide these reports to a central server. The central server uses statistical reports received from a wide distribution of clients to maintain comprehensive statistical data indicating exposure of confidential information to unsecure websites. This comprehensive statistical data can be used for purposes such as damage assessment, trend tracking and profiling of suspected malicious websites.

摘要翻译： 客户端计算机跟踪访问的网站并监视发送到访问的网站的机密信息。 随后将网站识别为恶意或受到损害时，确定是否访问了不安全的网站，如果是，是否将隐私信息暴露给不安全的网站。 客户编制有关传递到不安全网站的机密信息的统计报告，并将这些报告提供给中央服务器。 中央服务器使用从广泛分布的客户端收到的统计报告，以维护全面的统计数据，表明将机密信息暴露给不安全的网站。 这种综合统计数据可用于损害评估，趋势跟踪和疑似恶意网站的分析等目的。

公开(公告)号：US08214839B1

公开(公告)日：2012-07-03

申请号：US12059777

申请日：2008-03-31

申请人： Shaun Cooley ,  Randall Richards Cook ,  William E. Sobel

发明人： Shaun Cooley ,  Randall Richards Cook ,  William E. Sobel

IPC分类号： G06F13/00

CPC分类号： H04L67/025 ,  G06F17/30132 ,  G06F17/30203 ,  H04L67/18

摘要： File resources that are most likely to be used on a target computer are proactively cached, so that the resources are available before they are needed. This greatly reduces or eliminates associated user wait times. It is determined which file resources are most likely to be used, the cost of transmitting them to the cache, the cost of storing them in the cache and the amount of cache space available. Based on a weighted balancing analysis of factors such as these, specific file resources are proactively streamed for use on the target computer. The determination as to which resources are most likely to be used can be based on a variety of factors, such as usage patterns, schedule based information, user and group based information, target computer and network information, etc.

摘要翻译： 在目标计算机上最有可能使用的文件资源被主动缓存，以便资源在需要之前可用。 这大大减少或消除了相关联的用户等待时间。 确定哪些文件资源最有可能被使用，将它们发送到高速缓存的成本，将其存储在高速缓存中的成本以及可用的高速缓存空间量。 基于对这些因素的加权平衡分析，主动流式传输特定文件资源以在目标计算机上使用。 关于哪些资源最有可能被使用的决定可以基于各种因素，例如使用模式，基于时间表的信息，基于用户和组的信息，目标计算机和网络信息等。

公开(公告)号：US07941443B1

公开(公告)日：2011-05-10

申请号：US12124979

申请日：2008-05-21

申请人： William E. Sobel ,  Brian Hernacki ,  Shaun Cooley

发明人： William E. Sobel ,  Brian Hernacki ,  Shaun Cooley

IPC分类号： G06F7/00 ,  G06F17/30

CPC分类号： G06F21/6218 ,  G06F2221/2141 ,  G06F2221/2149

摘要： User account control (such as the UAC component of Windows Vista) is extended to enable users to allow their decisions on how to respond to managed events to be applied to equivalent events for groups, without any further prompting. When a managed event first occurs, the user is presented with an extended dialog prompting for input not only on whether to allow the event for just the user, but also on whether to allow the event for any groups the user manages. Managed groups can comprise all of the user's computers, or multiple user accounts the user manages. The user's response to the prompt and information concerning the managed event are stored. Matching events within a group context are recognized, and appropriate stored responses are automatically applied, without any additional user prompting.

摘要翻译： 扩展了用户帐户控制（如Windows Vista的UAC组件），使用户能够允许他们决定如何响应被管理事件应用于组的等效事件，而无需进一步提示。 当首次发生托管事件时，向用户显示一个扩展对话框，提示不仅要输入用户的事件，还要确定是否允许用户管理的任何组的事件。 被管理的组可以包括用户管理的所有用户的计算机或多个用户帐户。 存储用户对提示的响应和有关被管理事件的信息。 识别组内的匹配事件，并自动应用适当的存储响应，而无需任何其他用户提示。

公开(公告)号：US08321934B1

公开(公告)日：2012-11-27

申请号：US12115352

申请日：2008-05-05

申请人： Shaun Cooley ,  William E. Sobel

发明人： Shaun Cooley ,  William E. Sobel

IPC分类号： G06F11/00

CPC分类号： G06F21/56

摘要： Websites used for phishing are detected by analyzing end user confidential data submission statistics. A central process receives data indicating confidential information submitted to websites from a plurality of user computers. The received data is aggregated and analyzed, for example through statistical profiling. Through the analysis of the aggregated data, anomalous behavior concerning submission of confidential information to websites is detected, such is an unexpected, rapid increase in the amount of confidential information submitted to a given website. Responsive to detecting the anomalous behavior, further action is taken to protect users from submitting confidential information to that website. For example, an alert can be sent, a protective measure against the site can be published, the site can be added to a blacklist or a procedure to have the site shut down can be initiated.

摘要翻译： 通过分析最终用户机密数据提交统计信息来检测用于网络钓鱼的网站。 中央处理从多个用户计算机接收指示提交给网站的机密信息的数据。 收集的数据被聚合和分析，例如通过统计分析。 通过对汇总数据的分析，检测到向网站提交机密信息的异常行为，这是提交给给定网站的机密信息量意外迅速增加。 响应检测异常行为，采取进一步行动保护用户不向机构提交机密信息。 例如，可以发送一个警报，可以发布对该站点的保护措施，该站点可以添加到黑名单或程序中以使站点关闭可以启动。

公开(公告)号：US08849922B1

公开(公告)日：2014-09-30

申请号：US11864873

申请日：2007-09-28

申请人： Bruce McCorkendale ,  Shaun Cooley

发明人： Bruce McCorkendale ,  Shaun Cooley

IPC分类号： G06F15/16

CPC分类号： H04L12/1895 ,  H04L51/16

摘要： A method and apparatus for aggregating notices and alerts (alerts) into an aggregate machine readable feed wherein the alerts are retrieved from various information sources. One embodiment of the invention is a method and apparatus providing an alert via an aggregate machine readable feed, comprising receiving an alert from various information sources, converting the retrieved alert into an aggregate machine readable format, and placing the aggregate machine readable formatted alert into an aggregate machine readable feed.

摘要翻译： 一种用于将通知和警报（警报）聚合到聚合机器可读进给中的方法和装置，其中从各种信息源检索警报。 本发明的一个实施例是一种通过聚合机器可读进给提供警报的方法和装置，包括从各种信息源接收警报，将所检索到的警报转换为聚合机器可读格式，以及将集合机器可读格式化警报放入 聚合机器可读进给。

公开(公告)号：US08762229B1

公开(公告)日：2014-06-24

申请号：US11959439

申请日：2007-12-18

申请人： Brian Hernacki ,  Bruce McCorkendale ,  Shaun Cooley

发明人： Brian Hernacki ,  Bruce McCorkendale ,  Shaun Cooley

IPC分类号： G06Q30/00

CPC分类号： G06Q30/0633

摘要： A parental policy is enforced for online purchases. A parent enters a parental policy indicating items that are prohibited for a child. When the child attempts to add an item to a wish list, it is determined whether the item is permitted according to the policy. If so, the addition of the item to the wish list is allowed to proceed. If the policy prohibits the item, the addition of the item to the wish list is blocked. Additionally, the parent can be informed (via email, telephone, etc.) of the attempt to add the item to the wish list. The same logic can be applied to attempts to purchase items for children, or attempts to purchase items by children.

摘要翻译： 强制执行家长政策进行网上购物。 父母输入父母政策，指示禁止孩子使用的项目。 当孩子尝试将项目添加到愿望清单中时，根据策略确定项目是否被允许。 如果是这样，则允许将项目添加到愿望清单中。 如果该政策禁止该项目，该项目添加到愿望清单将被阻止。 此外，父母可以通过（通过电子邮件，电话等）通知尝试将项目添加到愿望清单。 相同的逻辑可以应用于为儿童购买物品的尝试，或尝试购买儿童的物品。

公开(公告)号：US08180761B1

公开(公告)日：2012-05-15

申请号：US11965526

申请日：2007-12-27

申请人： Shaun Cooley ,  Bruce McCorkendale

发明人： Shaun Cooley ,  Bruce McCorkendale

IPC分类号： G06F17/00

CPC分类号： G06F17/30864

摘要： A computer, computer program product, and method prioritize a web crawler target link queue using referrer context information associated with a remote object link. An access statistics collection module detects links to remote objects and retrieves referrer context information for the links. An access statistics back end module receives and stores the referrer context information from the access statistics collection module. The referrer context information is analyzed by a target list prioritization module that uses the results of the analysis to prioritize a target queue of a web crawler. The referrer context information is an important resource in identifying information about how a link spreads, e.g., for threat detection or identification of popular links for indexing to produce more relevant search results.

摘要翻译： 计算机，计算机程序产品和方法使用与远程对象链接相关联的引用者上下文信息来优先考虑网络爬网程序目标链接队列。 访问统计信息收集模块检测到远程对象的链接并检索链接的引用者上下文信息。 访问统计后端模块从访问统计信息收集模块接收并存储引用者上下文信息。 引用者上下文信息由目标列表优先级模块分析，该模块使用分析结果来优化网络爬虫的目标队列。 引用者上下文信息是识别关于链路如何传播的信息的重要资源，例如用于威胁检测或识别用于索引的流行链接以产生更相关的搜索结果。

公开(公告)号：US08281366B1

公开(公告)日：2012-10-02

申请号：US12579093

申请日：2009-10-14

申请人： Bruce McCorkendale ,  Shaun Cooley

发明人： Bruce McCorkendale ,  Shaun Cooley

IPC分类号： H04L9/32

CPC分类号： G06F21/6209 ,  G06F2221/2105 ,  G06F2221/2111 ,  G06F2221/2141 ,  G06F2221/2149

摘要： A computer-implemented method for using guardian proximity to control computing activities of children. The method may include determining that a child is attempting to access a computing system and determining whether a guardian of the child is in proximity of the computing system. The method may also include limiting the child's access to one or more resources of the computing system if the guardian of the child is not in proximity of the computing system and permitting the child to access the one or more resources of the computing system if the guardian of the child is in proximity of the computing system.

摘要翻译： 一种使用监护人接近度来控制儿童计算活动的计算机实现方法。 该方法可以包括确定孩子正在尝试访问计算系统并且确定儿童的监护人是否在计算系统附近。 如果儿童的监护人不在计算系统附近，并允许儿童访问计算系统的一个或多个资源，则该方法还可以包括限制儿童对计算系统的一个或多个资源的访问，如果监护人 的孩子在计算系统附近。