专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20060130141A1 System and method of efficiently identifying and removing active malware from a computer 有权
标题翻译：从计算机有效识别和删除活动恶意软件的系统和方法
公开(公告)号：US20060130141A1
公开(公告)日：2006-06-15
申请号：US11012892
申请日：2004-12-15
申请人： Michael Kramer , Matthew Braverman , Marc Seinfeld , Jason Garms , Adrian Marinescu , George Chicioreanu , Scott Field
发明人： Michael Kramer , Matthew Braverman , Marc Seinfeld , Jason Garms , Adrian Marinescu , George Chicioreanu , Scott Field
IPC分类号： G06F12/14
CPC分类号： H04L63/1408 , G06F21/562
摘要： The present invention provides a system, method, and computer-readable medium for identifying and removing active malware from a computer. Aspects of the present invention are included in a cleaner tool that may be obtained automatically with an update service or may be downloaded manually from a Web site or similar distribution system. The cleaner tool includes a specialized scanning engine that searches a computer for active malware. Since the scanning engine only searches for active malware, the amount of data downloaded and resource requirements of the cleaner tool are less than traditional antivirus software. The scanning engine searches specific locations on a computer, such as data mapped in memory, configuration files, and file metadata for data characteristic of malware. If malware is detected, the cleaner tool removes the malware from the computer.
摘要翻译：本发明提供一种用于从计算机识别和去除活动恶意软件的系统，方法和计算机可读介质。本发明的方面包括在可以使用更新服务自动获得的清洁工具中，或者可以从网站或类似的分发系统手动下载。更清洁的工具包括专门的扫描引擎，可在计算机上搜索主动恶意软件。由于扫描引擎仅搜索活动的恶意软件，所以下载的数据量和清洁工具的资源需求比传统的防病毒软件要少。扫描引擎在计算机上搜索特定位置，例如映射到内存中的数据，配置文件和文件元数据，以便恶意软件的特征。如果检测到恶意软件，则清洁工具会从计算机中删除恶意软件。

2. 发明申请

US20060137010A1 Method and system for a self-healing device 有权
标题翻译：自愈装置的方法和系统
公开(公告)号：US20060137010A1
公开(公告)日：2006-06-22
申请号：US11018412
申请日：2004-12-21
申请人： Michael Kramer , Scott Field , Marc Seinfeld , Carl Carter-Schwendler , Paul Luber , Adrian Marinescu
发明人： Michael Kramer , Scott Field , Marc Seinfeld , Carl Carter-Schwendler , Paul Luber , Adrian Marinescu
IPC分类号： G06F12/14
CPC分类号： G06F21/568 , G06F21/554 , Y10S707/99953
摘要： A self-healing device is provided in which changes made between the time that an infection resulting from an attack on the device was detected and an earlier point in time to which the device is capable of being restored may be recovered based, at least in part, on what kinds of changes were made, whether the changes were bona fide or malware induced, whether the changes were made after the time that the infection likely occurred, and whether new software was installed.
摘要翻译：提供了一种自愈设备，其中，可以在至少部分地恢复在检测到由设备的攻击引起的感染的时间与设备能够恢复到的较早时间点之间进行的改变关于什么样的变化，这些变化是真正的还是恶意软件引起的，这些变化是否在感染可能发生的时间之后进行，以及是否安装了新的软件。

3. 发明申请

US20060272021A1 Scanning data in an access restricted file for malware 有权
标题翻译：在恶意软件的访问限制文件中扫描数据
公开(公告)号：US20060272021A1
公开(公告)日：2006-11-30
申请号：US11139409
申请日：2005-05-27
申请人： Adrian Marinescu , George Chicioreanu , Marius Gheorghescu , Scott Field
发明人： Adrian Marinescu , George Chicioreanu , Marius Gheorghescu , Scott Field
IPC分类号： G06F12/14
CPC分类号： G06F21/56
摘要： The present invention is directed toward a system, method, and computer-readable medium that scan a file for malware that maintains a restrictive access attribute that limits access to the file. In accordance with one aspect of the present invention, a method for performing a scan for malware is provided when antivirus software on a computer encounters a file with a restrictive access attribute that prevents the file from being scanned. More specifically, the method includes identifying the restrictive access attribute that limits access to the file; bypassing the restrictive access attribute to access data in the file; and using a scan engine to scan the data in the file for malware.
摘要翻译：本发明涉及一种系统，方法和计算机可读介质，其扫描文件以维护限制对该文件的访问的限制性访问属性的恶意软件。根据本发明的一个方面，当计算机上的防病毒软件遇到具有阻止文件被扫描的限制性访问属性的文件时，提供了用于执行恶意软件扫描的方法。更具体地，该方法包括识别限制对文件的访问的限制性访问属性; 绕过限制访问属性访问文件中的数据; 并使用扫描引擎来扫描文件中的恶意软件数据。

4. 发明申请

US20070006304A1 Optimizing malware recovery 审中-公开
标题翻译：优化恶意软件恢复
公开(公告)号：US20070006304A1
公开(公告)日：2007-01-04
申请号：US11172373
申请日：2005-06-30
申请人： Michael Kramer , Scott Field , Marc Seinfeld
发明人： Michael Kramer , Scott Field , Marc Seinfeld
IPC分类号： G06F12/14
CPC分类号： G06F21/554 , G06F21/55 , G06F21/568 , H04L63/1416 , H04L63/1441
摘要： Malware recovery optimization is provided in which malware detection processes and protocol processes on a device are monitored for events indicating a breach of security of the device, such as the presence of an infection or other evidence of a malware attack. The devices report the events for collection on a centralized event collector that issues alerts of the events to other devices that may have been compromised as a result of the breach of security. Upon receipt of the alert, the receiving devices may initiate malware recovery optimization, including activating anti-virus software to initiate a targeted scan of those resources that may have been compromised. In this manner, malware recovery processes are optimized to recover the receiving device and/or resources when indicated.
摘要翻译：提供了恶意软件恢复优化，其中监视设备上的恶意软件检测过程和协议进程，以指示违反设备安全性的事件，例如是否存在感染或其他恶意软件攻击证据。这些设备会报告在集中式事件收集器上收集的事件，从而将事件的警报发送到可能由于违反安全性而受到威胁的其他设备。在接收到警报之后，接收设备可以启动恶意软件恢复优化，包括激活防病毒软件以对可能已经被泄露的那些资源进行有针对性的扫描。以这种方式，恶意软件恢复过程被优化以在指示时恢复接收设备和/或资源。

5. 发明申请

US20060136720A1 Computer security management, such as in a virtual machine or hardened operating system 有权
标题翻译：计算机安全管理，如虚拟机或硬化操作系统
公开(公告)号：US20060136720A1
公开(公告)日：2006-06-22
申请号：US11019094
申请日：2004-12-21
申请人： Benjamin Armstrong , Paul England , Scott Field , Jason Garms , Michael Kramer , Kenneth Ray
发明人： Benjamin Armstrong , Paul England , Scott Field , Jason Garms , Michael Kramer , Kenneth Ray
IPC分类号： H04L9/00
CPC分类号： G06F21/53 , G06F21/56 , G06F21/566
摘要： A security scheme provides security to one or more self-contained operating environment instances executing on a computer. The security scheme may include implementing a set of security applications that may be controlled by a supervisory process, or the like. Both the set of security applications and the supervisory process may operate on a host system of the computer, which may also provide a platform for execution of the one or more self-contained operating environments. The security scheme protects processes running in the one or more self-contained operating environment and processes running on the computer outside of the self-contained operating environments.
摘要翻译：安全方案为在计算机上执行的一个或多个自包含的操作环境实例提供安全性。安全方案可以包括实现可由监督过程等控制的一组安全应用。所述一组安全应用程序和监督过程可以在计算机的主机系统上操作，其还可以提供用于执行一个或多个独立操作环境的平台。安全性方案保护在独立操作环境中运行的进程和在独立操作环境之外的计算机上运行的进程。

6. 发明申请

US20070162975A1 Efficient collection of data 审中-公开
标题翻译：高效收集数据
公开(公告)号：US20070162975A1
公开(公告)日：2007-07-12
申请号：US11326890
申请日：2006-01-06
申请人： Adam Overton , Alexey Polyakov , Andrew Newman , Jason Garms , Ronald Franczyk , Scott Field , Sterling Reasor
发明人： Adam Overton , Alexey Polyakov , Andrew Newman , Jason Garms , Ronald Franczyk , Scott Field , Sterling Reasor
IPC分类号： G06F12/14
CPC分类号： H04L63/1416 , G06F21/561
摘要： Generally described, a method, software system, and computer-readable medium are provided for efficiently collecting data this useful in developing software systems to identify and protect against malware. In accordance with one embodiment, a method for collecting data to determine whether a malware is propagating in a networking environment is provided. More specifically, the method includes receiving preliminary data sets at a server computer from a plurality of client computers that describes attributes of a potential malware. Then a determination is made regarding whether secondary data is needed to implement systems for protecting against the potential malware. If secondary data is needed, the method causes the secondary data to be collected when an additional preliminary data set is received from a client computer.
摘要翻译：通常描述，提供了一种方法，软件系统和计算机可读介质，用于有效地收集在开发软件系统中有用的数据，以识别和防止恶意软件。根据一个实施例，提供了一种用于收集数据以确定恶意软件是否在网络环境中传播的方法。更具体地说，该方法包括从描述潜在恶意软件的属性的多个客户端计算机在服务器计算机处接收初始数据集。然后确定是否需要辅助数据来实施防止潜在恶意软件的系统。如果需要辅助数据，则当从客户端计算机接收到附加的初始数据集时，该方法将导致辅助数据被收集。

7. 发明申请

US20060117106A1 Automatic Re-Authentication 有权
标题翻译：自动重认证
公开(公告)号：US20060117106A1
公开(公告)日：2006-06-01
申请号：US11275711
申请日：2006-01-25
申请人： Nadim Abdo , Adam Overton , Jason Garms , John Parsons , Alvin Loh , Scott Field
发明人： Nadim Abdo , Adam Overton , Jason Garms , John Parsons , Alvin Loh , Scott Field
IPC分类号： G06F15/16 , G06F15/173
CPC分类号： G06F13/107 , H04L63/08 , H04L63/126 , H04L67/14
摘要： Upon successfully authenticating a client device with a server system, the client device and server system share auto-reconnect data. Upon subsequently losing and re-establishing communications with the server system, the client sends an auto-authenticate request to the server. The auto-authenticate request includes a session verifier that is based at least in part on the shared auto-reconnect data. The server validates the session verifier. If the validation is successful, the server automatically re-authenticates the client device.
摘要翻译：当客户端设备与服务器系统成功认证后，客户端设备和服务器系统共享自动重新连接数据。随后丢失并重新建立与服务器系统的通信，客户端向服务器发送自动认证请求。自动认证请求包括至少部分地基于共享的自动重连接数据的会话验证器。服务器验证会话验证器。如果验证成功，服务器将自动重新认证客户端设备。

8. 发明申请

US20060101505A1 Automatic Re-Authentication 有权
公开(公告)号：US20060101505A1
公开(公告)日：2006-05-11
申请号：US11275681
申请日：2006-01-24
申请人： Nadim Abdo , Adam Overton , Jason Garms , John Parsons , Alvin Loh , Scott Field
发明人： Nadim Abdo , Adam Overton , Jason Garms , John Parsons , Alvin Loh , Scott Field
IPC分类号： H04L9/32
CPC分类号： G06F13/107 , H04L63/08 , H04L63/126 , H04L67/14
摘要： Upon successfully authenticating a client device with a server system, the client device and server system share auto-reconnect data. Upon subsequently losing and re-establishing communications with the server system, the client sends an auto-authenticate request to the server. The auto-authenticate request includes a session verifier that is based at least in part on the shared auto-reconnect data. The server validates the session verifier. If the validation is successful, the server automatically re-authenticates the client device.

9. 发明申请

US20050257208A1 Efficient patching 有权
标题翻译：高效补丁
公开(公告)号：US20050257208A1
公开(公告)日：2005-11-17
申请号：US10880848
申请日：2004-06-30
申请人： Anthony Blumfield , Gilad Golan , Jason Garms , Saud Alshibani , Scott Field
发明人： Anthony Blumfield , Gilad Golan , Jason Garms , Saud Alshibani , Scott Field
IPC分类号： G06F11/00 , G06F9/445 , G06F9/44
CPC分类号： G06F8/65 , G06F8/60 , G06F8/61 , G06F8/656 , G06F8/71 , G06F9/44505
摘要： A facility for applying a software patch is described. Using an automatic patching agent, the facility receives the software patch. In response to receiving the software patch, without user intervention, the facility performs the following acts: First, the facility identifies an instance of an executable module that is currently loaded, and to which the received software patch pertains. Second, the facility applies the received software patch to the identified loaded executable module instance to modify the behavior of the identified executable module instance.
摘要翻译：描述了应用软件补丁的设施。使用自动修补代理，该工具接收软件补丁。响应于接收到软件补丁而无需用户干预，设备执行以下动作：首先，设备识别当前加载的可执行模块的实例，并且所接收的软件补丁所属的实例。其次，设备将接收到的软件补丁应用到所识别的可加载的可执行模块实例，以修改所识别的可执行模块实例的行为。

10. 发明申请

US20060200863A1 On-access scan of memory for malware 有权
标题翻译：恶意软件的内存访问扫描
公开(公告)号：US20060200863A1
公开(公告)日：2006-09-07
申请号：US11070468
申请日：2005-03-01
申请人： Kenneth Ray , Michael Kramer , Paul England , Scott Field
发明人： Kenneth Ray , Michael Kramer , Paul England , Scott Field
IPC分类号： G06F12/14
CPC分类号： G06F12/145 , G06F21/562
摘要： The present invention provides a system, method, and computer-readable medium for identifying malware that is loaded in the memory of a computing device. Software routines implemented by the present invention track the state of pages loaded in memory using page table access bits available from a central processing unit. A page in memory may be in a state that is “unsafe” or potentially infected with malware. In this instance, the present invention calls a scan engine to search a page for malware before information on the page is executed.
摘要翻译：本发明提供一种用于识别加载到计算设备的存储器中的恶意软件的系统，方法和计算机可读介质。由本发明实现的软件程序使用从中央处理单元获得的页表访问位来跟踪加载在存储器中的页的状态。内存中的页面可能处于“不安全”或可能感染恶意软件的状态。在这种情况下，本发明在页面上的信息被执行之前，调用扫描引擎来搜索页面中的恶意软件。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式