专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明申请

US20120144490A1 MALICIOUS CODE INFECTION CAUSE-AND-EFFECT ANALYSIS 有权
标题翻译：恶意代码感染原因与效应分析
公开(公告)号：US20120144490A1
公开(公告)日：2012-06-07
申请号：US13369225
申请日：2012-02-08
申请人： Gregory D. Hartrell , David J. Steeves , Efim Hudis
发明人： Gregory D. Hartrell , David J. Steeves , Efim Hudis
IPC分类号： G06F21/00
CPC分类号： G06F21/552 , G06F21/565 , G06F2221/034 , H04L63/1416 , H04L63/1425
摘要： A malware analysis system for automating cause and effect analysis of malware infections is provided. The malware analysis system monitors and records computer system activities. Upon being informed of a suspected malware infection, the malware analysis system creates a time-bounded snapshot of the monitored activities that were conducted within a time frame prior to the notification of the suspected malware infection. The malware analysis system may also create a time-bounded snapshot of the monitored activities that are conducted within a time frame subsequent to the notification of the suspected malware infection. The malware analysis system provides the created snapshot or snapshots for further analysis.
摘要翻译：提供了恶意软件感染自动分析的恶意软件分析系统。恶意软件分析系统监控和记录计算机系统活动。在被通知疑似恶意软件感染后，恶意软件分析系统会在通知疑似恶意软件感染之前的一段时间内创建受监视活动的有时限的快照。恶意软件分析系统还可能会在通知疑似恶意软件感染后的时间内为受监视的活动创建时间有限的快照。恶意软件分析系统提供创建的快照或快照进行进一步分析。

12. 发明授权

US07620987B2 Obfuscating computer code to prevent an attack 有权
标题翻译：混淆计算机代码以防止攻击
公开(公告)号：US07620987B2
公开(公告)日：2009-11-17
申请号：US11203676
申请日：2005-08-12
申请人： Art Shelest , Gregory D. Hartrell
发明人： Art Shelest , Gregory D. Hartrell
IPC分类号： G06F11/00 , G06F11/30
CPC分类号： G06F21/566 , G06F21/52
摘要： A method and system for obfuscating computer code of a program to protect it from the adverse effects of malware is provided. The obfuscation system retrieves an executable form of the computer code. The obfuscation system then selects various obfuscation techniques to use in obfuscating the computer code. The obfuscation system applies the selected obfuscation techniques to the computer code. The obfuscation system then causes the obfuscated computer code to execute.
摘要翻译：提供了一种用于模糊程序的计算机代码以防止恶意软件的不利影响的方法和系统。混淆系统检索计算机代码的可执行形式。混淆系统然后选择各种混淆技术来模糊计算机代码。混淆系统将所选择的混淆技术应用于计算机代码。混淆系统然后使得混淆的计算机代码执行。

13. 发明申请

US20070289018A1 RESOURCE INDICATOR TRAP DOORS FOR DETECTING AND STOPPING MALWARE PROPAGATION 有权
标题翻译：资源指示器门用于检测和停止恶意软件传播
公开(公告)号：US20070289018A1
公开(公告)日：2007-12-13
申请号：US11422937
申请日：2006-06-08
申请人： David J. Steeves , Gregory D. Hartrell
发明人： David J. Steeves , Gregory D. Hartrell
IPC分类号： G06F12/14 , G06F11/00 , H04L9/32 , G06F11/30 , G06F12/16 , G06F15/18 , G08B23/00
CPC分类号： H04L63/1441 , G06F21/56 , G06F21/566 , G06F2221/2123 , H04L63/1408 , H04L63/1491
摘要： A method and system for detecting and stopping malware propagation using false resource entries is provided. A detection system uses trap door entries that are intentionally inserted into resource location stores to detect resource misuse. A “trap door” is a false resource that can be monitored by the detection system. The detection system monitors trapdoor entries that have been intentionally inserted into resource location stores, and looks for signs of use. The detection system can then determine whether a detected use of a trap door entry is a misuse of the trap door entry, and upon declaring a misuse of the trap door entry, the detection system can appropriately respond to the misuse.
摘要翻译：提供了一种使用虚假资源条目来检测和停止恶意软件传播的方法和系统。检测系统使用有意插入到资源位置存储中的陷阱门条来检测资源滥用。 “陷阱门”是可以由检测系统监控的虚假资源。检测系统监视有意插入到资源位置存储中的陷门条目，并查找使用符号。检测系统然后可以确定检测到的陷阱门入口的使用是否是陷阱门进入的滥用，并且在声明陷阱门进入被误用时，检测系统可以适当地应对误用。

14. 发明授权

US08955134B2 Malicious code infection cause-and-effect analysis 有权
标题翻译：恶意代码感染原因分析
公开(公告)号：US08955134B2
公开(公告)日：2015-02-10
申请号：US13369225
申请日：2012-02-08
申请人： Gregory D. Hartrell , David J. Steeves , Efim Hudis
发明人： Gregory D. Hartrell , David J. Steeves , Efim Hudis
IPC分类号： G06F21/00 , G06F21/55
CPC分类号： G06F21/552 , G06F21/565 , G06F2221/034 , H04L63/1416 , H04L63/1425
摘要： A malware analysis system for automating cause and effect analysis of malware infections is provided. The malware analysis system monitors and records computer system activities. Upon being informed of a suspected malware infection, the malware analysis system creates a time-bounded snapshot of the monitored activities that were conducted within a time frame prior to the notification of the suspected malware infection. The malware analysis system may also create a time-bounded snapshot of the monitored activities that are conducted within a time frame subsequent to the notification of the suspected malware infection. The malware analysis system provides the created snapshot or snapshots for further analysis.
摘要翻译：提供了恶意软件感染自动分析的恶意软件分析系统。恶意软件分析系统监控和记录计算机系统活动。在被通知疑似恶意软件感染后，恶意软件分析系统会在通知疑似恶意软件感染之前的一段时间内创建受监视活动的有时限的快照。恶意软件分析系统还可能会在通知疑似恶意软件感染后的时间内为受监视的活动创建时间有限的快照。恶意软件分析系统提供创建的快照或快照进行进一步分析。

15. 发明授权

US07913292B2 Identification and visualization of trusted user interface objects 有权
标题翻译：可信用户界面对象的识别和可视化
公开(公告)号：US07913292B2
公开(公告)日：2011-03-22
申请号：US11550554
申请日：2006-10-18
申请人： Gregory D. Hartrell , David J. Steeves
发明人： Gregory D. Hartrell , David J. Steeves
IPC分类号： G06F7/04 , G06F11/30 , G08B23/00
CPC分类号： G06F21/31 , G06F21/554 , G06F21/64 , G06F2221/2119
摘要： A unique system and method that facilitates visually identifying authentic UI objects, bundles, or windows is provided. A detection component can detect when user-based input has activated a verification mode with respect to one or more trusted UI objects rendered on-screen. A verification component can verify at least one of a source and identity associated with one or more UI objects in order to ensure the integrity related therewith. A verification rendering engine can re-render the one or more trusted UI objects in a manner that is based at least upon whether the one or more trusted UI objects are verified, thus improving visual recognition of verified trusted UI objects over non-verified UI objects.
摘要翻译：提供了一种便于视觉识别真实UI对象，束或窗口的独特系统和方法。检测组件可以检测基于用户的输入何时相对于在屏幕上呈现的一个或多个受信任的UI对象激活了验证模式。验证组件可以验证与一个或多个UI对象相关联的源和身份中的至少一个，以确保与其相关的完整性。验证呈现引擎可以以至少基于一个或多个可信UI对象是否被验证的方式重新呈现一个或多个受信任的UI对象，从而通过未经验证的UI对象来改善经验证的可信UI对象的视觉识别。

16. 发明申请

US20080141377A1 Strategies for Investigating and Mitigating Vulnerabilities Caused by the Acquisition of Credentials 有权
标题翻译：调查和减轻获取证书所引起的脆弱性的策略
公开(公告)号：US20080141377A1
公开(公告)日：2008-06-12
申请号：US11608126
申请日：2006-12-07
申请人： John Dunagan , Gregory D. Hartrell , Daniel R. Simon
发明人： John Dunagan , Gregory D. Hartrell , Daniel R. Simon
IPC分类号： G06F21/00
CPC分类号： H04L63/1433 , G06F21/577 , G06F2221/2101
摘要： A strategy is described for assessing and mitigating vulnerabilities within a data processing environment. The strategy collects access data that reflects actual log-in behavior exhibited by users in the environment. The strategy also collects rights data that reflects the rights possessed by one or more administrators within the environment. Based on the access data and rights data, the strategy identifies how a user or other entity that gains access to one part of the environment can potentially compromise additional parts of the environment. The strategy can recommend and implement steps aimed at reducing any identified vulnerabilities.
摘要翻译：描述了一种用于评估和减轻数据处理环境中的漏洞的策略。该策略收集反映用户在环境中展示的实际登录行为的访问数据。该策略还收集反映环境中一个或多个管理员拥有的权利的权限数据。根据访问数据和权限数据，该策略将识别获得对环境一部分访问权限的用户或其他实体如何潜在地危及环境的其他部分。该策略可以推荐并实施旨在减少任何已识别的漏洞的步骤。

17. 发明授权

US08667581B2 Resource indicator trap doors for detecting and stopping malware propagation 有权
标题翻译：用于检测和停止恶意软件传播的资源指示器陷门
公开(公告)号：US08667581B2
公开(公告)日：2014-03-04
申请号：US11422937
申请日：2006-06-08
申请人： David J. Steeves , Gregory D. Hartrell
发明人： David J. Steeves , Gregory D. Hartrell
IPC分类号： G06F11/00
CPC分类号： H04L63/1441 , G06F21/56 , G06F21/566 , G06F2221/2123 , H04L63/1408 , H04L63/1491
摘要： A method and system for detecting and stopping malware propagation using false resource entries is provided. A detection system uses trap door entries that are intentionally inserted into resource location stores to detect resource misuse. A “trap door” is a false resource that can be monitored by the detection system. The detection system monitors trapdoor entries that have been intentionally inserted into resource location stores, and looks for signs of use. The detection system can then determine whether a detected use of a trap door entry is a misuse of the trap door entry, and upon declaring a misuse of the trap door entry, the detection system can appropriately respond to the misuse.
摘要翻译：提供了一种使用虚假资源条目来检测和停止恶意软件传播的方法和系统。检测系统使用有意插入到资源位置存储中的陷阱门条来检测资源滥用。 “陷阱门”是可以由检测系统监控的虚假资源。检测系统监视有意插入到资源位置存储中的陷门条目，并查找使用符号。检测系统然后可以确定检测到的陷阱门入口的使用是否是陷阱门进入的滥用，并且在声明陷阱门进入被误用时，检测系统可以适当地应对误用。

18. 发明授权

US07779465B2 Distributed peer attack alerting 有权
标题翻译：分布式对等攻击警报
公开(公告)号：US07779465B2
公开(公告)日：2010-08-17
申请号：US11441508
申请日：2006-05-26
申请人： Arthur H. Baker , Gregory D. Hartrell , Carl Ellison
发明人： Arthur H. Baker , Gregory D. Hartrell , Carl Ellison
IPC分类号： G06F11/07
CPC分类号： H04L63/1441 , G06F21/554 , H04L63/1408
摘要： A system and method for distributed peer attack alerting is disclosed. The method includes accessing a peer community wherein the peer community comprises a plurality of nodes comprising a network and wherein at least one of the plurality of nodes comprises an attack identifier. The method further includes identifying an attack at one of the plurality of nodes. In addition, the method includes transmitting an alert to the plurality of nodes, the alert comprising information associated with the attack and automatically configuring at least one attack identifier associated with one of the plurality of nodes in response to the alert.
摘要翻译：公开了一种用于分布式对等攻击警报的系统和方法。该方法包括访问对等社区，其中对等社区包括包括网络的多个节点，并且其中多个节点中的至少一个包括攻击标识符。该方法还包括识别多个节点之一上的攻击。此外，该方法包括向多个节点发送警报，所述警报包括与所述攻击相关联的信息，并且响应于所述警报自动地配置与所述多个节点之一相关联的至少一个攻击标识符。

19. 发明申请

US20100192230A1 PROTECTING TRANSACTIONS 有权
标题翻译：保护交易
公开(公告)号：US20100192230A1
公开(公告)日：2010-07-29
申请号：US12359215
申请日：2009-01-23
申请人： David J. Steeves , Kim Cameron , Todd L. Carpenter , David Foster , Quentin S. Miller , Gregory D. Hartrell
发明人： David J. Steeves , Kim Cameron , Todd L. Carpenter , David Foster , Quentin S. Miller , Gregory D. Hartrell
IPC分类号： H04L9/00
CPC分类号： G06Q20/027 , G06F21/74 , G06Q20/40 , H04L63/08 , H04L2463/102
摘要： Technology is described for protecting transactions. The technology may include a switching component that a user can employ to switch an associated mobile device into a secure mode so that a user can confirm the transaction. After initiating a transaction request, the user can confirm the transaction request by activating the switching component, which can cause the mobile device to switch into a secure mode. In the secure mode, the mobile device may prevent the mobile device from conducting various normal activities, such as executing applications, receiving input, providing output, and so forth. The switching component may disable other processing temporarily. Upon receiving the confirmation from the user, the switching component may send a confirmation communication to complete the transaction.
摘要翻译：技术描述为保护交易。该技术可以包括用户可以使用的切换组件来将相关联的移动设备切换到安全模式，使得用户可以确认交易。在启动交易请求之后，用户可以通过激活交换组件来确认交易请求，这可以使移动设备切换到安全模式。在安全模式下，移动设备可以防止移动设备进行各种正常的活动，例如执行应用，接收输入，提供输出等等。切换组件可能暂时禁用其他处理。在接收到来自用户的确认之后，交换组件可以发送确认通信来完成交易。

20. 发明申请

US20080189548A1 KEY EXCHANGE VERIFICATION 有权
标题翻译：关键交换验证
公开(公告)号：US20080189548A1
公开(公告)日：2008-08-07
申请号：US11670857
申请日：2007-02-02
申请人： David J. Steeves , Gregory D. Hartrell , Ryan M. Burkhardt , Jason L. Cohen
发明人： David J. Steeves , Gregory D. Hartrell , Ryan M. Burkhardt , Jason L. Cohen
IPC分类号： H04L9/32 , G06F17/00 , G06F21/00
CPC分类号： H04L63/1466 , G06F21/602 , H04L9/083 , H04L9/0841 , H04L63/061 , H04L63/18 , H04L2209/80
摘要： Key exchanges between peer-to-peer devices can be vulnerable to man in the middle attacks. Verification of the key exchanges can be made on a channel, network and/or device different from the channel, network and/or device used for the key exchange to determine whether the key exchange was secure. Verification of the key exchange can also be made through an established and trusted device and/or entity. If the key exchange was secure, the parties to a communication utilizing the key(s) exchanged can be notified, if desired. If the key exchange was not secure, the parties can be notified and the communication can be selectively disconnected.
摘要翻译：点对点设备之间的关键交换在中间攻击中可能容易受到人员伤害。密钥交换的验证可以在与用于密钥交换的信道，网络和/或设备不同的信道，网络和/或设备上进行，以确定密钥交换是否安全。密钥交换的验证也可以通过已建立和受信任的设备和/或实体进行。如果密钥交换是安全的，则如果需要，可以通知利用所交换的密钥的通信方。如果密钥交换不安全，可以通知各方，并且可以选择性地断开通信。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式