专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08214895B2 Whitelist and blacklist identification data 有权
标题翻译：白名单和黑名单识别数据
公开(公告)号：US08214895B2
公开(公告)日：2012-07-03
申请号：US11861489
申请日：2007-09-26
申请人： Chengi Jimmy Kuo , Jigar J. Mody
发明人： Chengi Jimmy Kuo , Jigar J. Mody
IPC分类号： H04L29/06
CPC分类号： G06F21/564
摘要： Aspects of the subject matter described herein relate to identifying good files and malware based on whitelists and blacklists. In aspects, a node starts a scan of files on a data store. In conjunction with starting the scan, the node creates a data structure that indicates the directories on the data store. The node sends the data structure to a whitelist server and a blacklist server and an indication of a last successful time of communication. The whitelist and blacklist servers respond to the node with information about any new files that have been added to the directories since the last successful communication. The node may subsequently use the information to identify known good files and malware.
摘要翻译：本文描述的主题的方面涉及基于白名单和黑名单来识别良好文件和恶意软件。在方面，节点开始对数据存储上的文件进行扫描。结合开始扫描，节点创建一个数据结构，指示数据存储上的目录。节点将数据结构发送到白名单服务器和黑名单服务器，并指示最后一次成功通信时间。白名单和黑名单服务器响应节点，其中包含自上次成功通信以来添加到目录中的任何新文件的信息。节点可以随后使用该信息来识别已知的良好文件和恶意软件。

2. 发明申请

US20090083852A1 Whitelist and Blacklist Identification Data 有权
标题翻译：白名单和黑名单识别数据
公开(公告)号：US20090083852A1
公开(公告)日：2009-03-26
申请号：US11861489
申请日：2007-09-26
申请人： Chengi Jimmy Kuo , Jigar J. Mody
发明人： Chengi Jimmy Kuo , Jigar J. Mody
IPC分类号： G06F11/00
CPC分类号： G06F21/564
摘要： Aspects of the subject matter described herein relate to identifying good files and malware based on whitelists and blacklists. In aspects, a node starts a scan of files on a data store. In conjunction with starting the scan, the node creates a data structure that indicates the directories on the data store. The node sends the data structure to a whitelist server and a blacklist server and an indication of a last successful time of communication. The whitelist and blacklist servers respond to the node with information about any new files that have been added to the directories since the last successful communication. The node may subsequently use the information to identify known good files and malware.
摘要翻译：本文描述的主题的方面涉及基于白名单和黑名单来识别良好文件和恶意软件。在方面，节点开始对数据存储上的文件进行扫描。结合开始扫描，节点创建一个数据结构，指示数据存储上的目录。节点将数据结构发送到白名单服务器和黑名单服务器，并指示最后一次成功通信时间。白名单和黑名单服务器响应节点，其中包含自上次成功通信以来添加到目录中的任何新文件的信息。节点可以随后使用该信息来识别已知的良好文件和恶意软件。

3. 发明申请

US20130152201A1 Adjunct Computing Machine for Remediating Malware on Compromised Computing Machine 审中-公开
标题翻译：补充计算机补救恶意软件的辅助计算机
公开(公告)号：US20130152201A1
公开(公告)日：2013-06-13
申请号：US13316709
申请日：2011-12-12
申请人： Vincent P. Gullotto , Kelsey Scott Molenkamp , Marc E. Seinfeld , Chengi Jimmy Kuo
发明人： Vincent P. Gullotto , Kelsey Scott Molenkamp , Marc E. Seinfeld , Chengi Jimmy Kuo
IPC分类号： G06F21/00
CPC分类号： H04L63/145 , G06F21/564 , G06F21/568 , G06F21/575
摘要： Described is a technology by which a malware-compromised machine, such as a personal computer is cleaned through the use of a functional adjunct machine, such as a mobile device (or vice-versa). The functional adjunct machine performs actions on behalf of the malware-compromised machine and/or to assist the remediation. This may include downloading antimalware-related data (e.g., an application, antimalware code, signature updates and/or the like) via a marketplace/application store, and transferring at least some of the data and/or programs to the compromised machine. Other actions may include using the functional adjunct machine to boot the malware-compromised machine into a non-compromised state and providing the data or programs to allow remediation of the malware while in this state.
摘要翻译：描述了通过使用功能性辅助机器（诸如移动设备（或反之亦然））来清洁诸如个人计算机的恶意软件损害的机器的技术。功能辅助机器代表恶意软件受损机器执行操作和/或协助修复。这可以包括经由市场/应用商店下载反恶意软件相关数据（例如应用程序，反恶意软件代码，签名更新等），并将数据和/或程序中的至少一些传送到受损机器。其他动作可以包括使用功能辅助机器将受恶意软件攻击的机器引导到非破坏状态，并且在该状态下提供数据或程序以允许修复恶意软件。

4. 发明授权

US06230288B1 Method of treating whitespace during virus detection 有权
标题翻译：病毒检测期间处理空白的方法
公开(公告)号：US06230288B1
公开(公告)日：2001-05-08
申请号：US09181880
申请日：1998-10-29
申请人： Chengi Jimmy Kuo , Jivko Koltchev , Dao-Chen Zheng , Joseph Peter
发明人： Chengi Jimmy Kuo , Jivko Koltchev , Dao-Chen Zheng , Joseph Peter
IPC分类号： H02H305
CPC分类号： G06F21/564
摘要： A method is provided for detecting computer viruses that infect text-based files. In accordance with a preferred embodiment, a collection of virus signatures reflecting sequences of characters or instructions known to be found in such viruses is maintained on a computer system. A virus detection program is also maintained for the purpose of comparing the contents of computer files to the virus signatures. Upon execution of the virus detection program, whitespace within text-based files is transformed such that each sequence of whitespace characters is replaced by a single whitespace character. Virus signatures of viruses known to infect text files are similarly transformed. A transformed text-based file is then searched for at least one of said virus signatures. The user is alerted to a possible virus infection if any of the virus signatures are found in a file. In another preferred embodiment, an additional collection of at least one virus signature containing sequences of characters or instructions known to be found in viruses that infect executable computer files is maintained on the computer system. A transformed text-based file is searched for at least one of the additional virus signature, which are not transformed before the search.
摘要翻译：提供了一种用于检测感染基于文本的文件的计算机病毒的方法。根据优选实施例，在计算机系统上保持反映了在这种病毒中已知的字符序列或指令的病毒签名的集合。还维护病毒检测程序，以便将计算机文件的内容与病毒签名进行比较。一旦执行病毒检测程序，基于文本的文件中的空格将被转换，使得空白字符的每个序列都被单个空格字符替换。已知感染文本文件的病毒的病毒签名也被类似地转换。然后搜索经变换的基于文本的文件中的至少一个所述病毒签名。如果在文件中找到任何病毒签名，用户将被警告可能的病毒感染。在另一个优选实施例中，在计算机系统上保留了包含感染可执行计算机文件的病毒中已知存在的字符序列或指令的至少一个病毒签名的附加集合。搜索经变换的基于文本的文件中的至少一个额外的病毒签名，其在搜索之前未被转换。

5. 发明授权

US09015843B2 Predictive malware threat mitigation 有权
标题翻译：预测恶意软件威胁减轻
公开(公告)号：US09015843B2
公开(公告)日：2015-04-21
申请号：US12959949
申请日：2010-12-03
申请人： Bryan C. Griffin , Vidyanand N. Rajpathak , Chengi Jimmy Kuo , Igal Figlin
发明人： Bryan C. Griffin , Vidyanand N. Rajpathak , Chengi Jimmy Kuo , Igal Figlin
IPC分类号： G06F21/50 , G06F21/55 , G06F21/56 , G06F21/57 , H04L29/06
CPC分类号： G06F21/56 , G06F21/577 , H04L63/1408 , H04L63/1416 , H04L63/1433
摘要： The subject disclosure is directed towards protecting against malware, by classifying a user's risk level, which corresponds to a likelihood of malware being activated. To make the classification, data is collected that represents a probability of encountering malware, a probability of a user activating that malware, and the impact to the machine is activated. The classification maps to a protection level, which may be dynamically adjustable, e.g., based upon current risk conditions. The protection level determines a way to mitigate possible damage, such as by running a program as a virtualized program, running a virtualized operating system, or sandboxing a process.
摘要翻译：该主题公开旨在通过对用户的风险等级进行分类来防范恶意软件，这对应于恶意软件被激活的可能性。为了进行分类，收集表示遇到恶意软件的可能性的数据，激活该恶意软件的用户的概率以及对机器的影响被激活。分类映射到保护级别，其可以是动态可调整的，例如基于当前的风险状况。保护级别决定了一种减轻可能的损害的方法，例如通过运行程序作为虚拟化程序，运行虚拟化操作系统或沙箱进程。

6. 发明申请

US20120324578A1 MOBILE DEVICE OPERATIONS WITH BATTERY OPTIMIZATION 有权
标题翻译：具有电池优化的移动设备操作
公开(公告)号：US20120324578A1
公开(公告)日：2012-12-20
申请号：US13162133
申请日：2011-06-16
申请人： Marc Seinfeld , Chengi Jimmy Kuo , Aaron Putnam , Jeff Williams
发明人： Marc Seinfeld , Chengi Jimmy Kuo , Aaron Putnam , Jeff Williams
IPC分类号： G06F1/28 , G06F21/00
CPC分类号： G06F1/3206 , G06F1/329 , H04W52/0264 , Y02D10/24 , Y02D70/142 , Y02D70/144 , Y02D70/146 , Y02D70/164
摘要： Techniques for conserving battery power in devices are provided. One or more deferrable tasks are queued for later execution. An initiation of a subsequent charging event for a battery of the device is detected. The queued deferrable task(s) are enabled to be executed during the charging event. For instance, the queued deferrable task(s) may be enabled to be executed if the charging event is predicted to be a long duration charging event, such as by referring to a charging profile of the mobile device. In this manner, battery power is conserved while the device is in use and not connected to a battery charger.
摘要翻译：提供了在设备中节省电池电量的技术。一个或多个可延迟的任务排队等待稍后执行。检测到针对装置的电池的后续充电事件的启动。排队的延期任务可以在充电事件期间执行。例如，如果计费事件被预测为长时间充电事件，例如通过参考移动设备的计费简档，则排队的可延展任务可以被执行。以这种方式，当设备在使用中并且未连接到电池充电器时，电池电力被保存。

7. 发明申请

US20100169972A1 SHARED REPOSITORY OF MALWARE DATA 审中-公开
标题翻译：共享恶意数据记录
公开(公告)号：US20100169972A1
公开(公告)日：2010-07-01
申请号：US12347103
申请日：2008-12-31
申请人： Chengi Jimmy Kuo , Marc Seinfeld , Jeff Williams
发明人： Chengi Jimmy Kuo , Marc Seinfeld , Jeff Williams
IPC分类号： G06F21/00 , G06F17/00
CPC分类号： H04L63/145 , G06F21/564
摘要： Various principles for maintaining a shared repository of authorization scanning results, which may be populated with results of authorization scans of particular files (and other content units) as well as a signature for those particular files. When a particular file is to be scanned by a client computing device to determine whether it contains unauthorized software, a signature for the file may be calculated and provided to the shared repository. If the repository has a result for that file—as indicated by a signature for the file being present in the repository—the result in the repository may be provided to the client computing device that issued the query, and the client computing device may accept the answer in the shared repository. If the result is not in the repository (i.e., the file has not been scanned), then the file may be scanned, and a result may be placed in the repository.
摘要翻译：用于维护授权扫描结果的共享存储库的各种原则，其可以用特定文件（和其他内容单元）的授权扫描结果以及这些特定文件的签名来填充。当客户端计算设备扫描特定文件以确定其是否包含未授权的软件时，可以计算文件的签名并将其提供给共享存储库。如果存储库具有该文件的结果（如存储在存储库中的文件的签名所示），则存储库中的结果可以被提供给发出查询的客户端计算设备，并且客户端计算设备可以接受在共享存储库中回答。如果结果不在存储库中（即文件未被扫描），则可以扫描该文件，并将结果放置在存储库中。

8. 发明授权

US06748534B1 System and method for partitioned distributed scanning of a large dataset for viruses and other malware 失效
标题翻译：用于病毒和其他恶意软件的大型数据集的分区扫描的系统和方法
公开(公告)号：US06748534B1
公开(公告)日：2004-06-08
申请号：US09540849
申请日：2000-03-31
申请人： Dmitry O. Gryaznov , Chengi Jimmy Kuo
发明人： Dmitry O. Gryaznov , Chengi Jimmy Kuo
IPC分类号： G06F1130
CPC分类号： H04L63/14 , G06F21/564 , G06F21/567
摘要： A system and a method for performing partitioned scanning of a dataset for malware in a distributed computing environment is disclosed. A dataset is maintained in a plurality of structured databases in the distributed computing environment. Each database stores a plurality of data item groups which each include a plurality of individual data items. Each such data item is uniquely identified within the dataset by a data item identifier. A set of indices is stored in a centralized database. The set of indices includes a list of scanned data item identifiers for each data item within the dataset scanned for malware and a list of last entry numbers for each data item group stored in each database. Each last entry number corresponds to one such data item within the data item group last scanned for malware. A plurality of malware scanners are executed in substantial concurrency. For each malware scanner, one such database and each such data item group within the selected database having data items not appearing in the list of last entry numbers are selected. Each such data item having a data item identifier not appearing in the list of scanned data item identifiers is obtained. Each such obtained data item is scanned for malware.
摘要翻译：公开了一种用于在分布式计算环境中执行用于恶意软件的数据集的分区扫描的系统和方法。数据集被保存在分布式计算环境中的多个结构化数据库中。每个数据库存储多个数据项目组，每个数据项目组包括多个单独的数据项。每个这样的数据项在数据集中由数据项标识符唯一地标识。一组索引存储在集中式数据库中。该组索引包括扫描的恶意软件的数据集中的每个数据项的扫描数据项标识符的列表以及存储在每个数据库中的每个数据项组的最后一个条目号的列表。每个最后一个条目号码对应于上一次扫描的恶意软件的数据项目组中的一个这样的数据项。多个恶意软件扫描器以大量并发执行。对于每个恶意软件扫描器，选择一个这样的数据库和所选择的数据库中的每个这样的数据项组，其中没有出现在最后条目列表中的数据项。获得具有不出现在扫描数据项标识符的列表中的数据项标识符的每个这样的数据项。每个这样获得的数据项被扫描恶意软件。

9. 发明授权

US09152202B2 Mobile device operations with battery optimization 有权
标题翻译：移动设备操作与电池优化
公开(公告)号：US09152202B2
公开(公告)日：2015-10-06
申请号：US13162133
申请日：2011-06-16
申请人： Marc Seinfeld , Chengi Jimmy Kuo , Aaron Putnam , Jeff Williams
发明人： Marc Seinfeld , Chengi Jimmy Kuo , Aaron Putnam , Jeff Williams
IPC分类号： G06F1/32 , H04W52/02
CPC分类号： G06F1/3206 , G06F1/329 , H04W52/0264 , Y02D10/24 , Y02D70/142 , Y02D70/144 , Y02D70/146 , Y02D70/164
摘要： Techniques for conserving battery power in devices are provided. One or more deferrable tasks are queued for later execution. An initiation of a subsequent charging event for a battery of the device is detected. The queued deferrable task(s) are enabled to be executed during the charging event. For instance, the queued deferrable task(s) may be enabled to be executed if the charging event is predicted to be a long duration charging event, such as by referring to a charging profile of the mobile device. In this manner, battery power is conserved while the device is in use and not connected to a battery charger.
摘要翻译：提供了在设备中节省电池电量的技术。一个或多个可延迟的任务排队等待稍后执行。检测到针对装置的电池的后续充电事件的启动。排队的延期任务可以在充电事件期间执行。例如，如果计费事件被预测为长时间充电事件，例如通过参考移动设备的计费简档，则排队的可延展任务可以被执行。以这种方式，当设备在使用中并且未连接到电池充电器时，电池电力被保存。

10. 发明申请

US20120144492A1 Predictive Malware Threat Mitigation 有权
标题翻译：预测恶意软件威胁缓解
公开(公告)号：US20120144492A1
公开(公告)日：2012-06-07
申请号：US12959949
申请日：2010-12-03
申请人： Bryan C. Griffin , Vidyanand N. Rajpathak , Chengi Jimmy Kuo , Igal Figlin
发明人： Bryan C. Griffin , Vidyanand N. Rajpathak , Chengi Jimmy Kuo , Igal Figlin
IPC分类号： G06F11/00
CPC分类号： G06F21/56 , G06F21/577 , H04L63/1408 , H04L63/1416 , H04L63/1433
摘要： The subject disclosure is directed towards protecting against malware, by classifying a user's risk level, which corresponds to a likelihood of malware being activated. To make the classification, data is collected that represents a probability of encountering malware, a probability of a user activating that malware, and the impact to the machine is activated. The classification maps to a protection level, which may be dynamically adjustable, e.g., based upon current risk conditions. The protection level determines a way to mitigate possible damage, such as by running a program as a virtualized program, running a virtualized operating system, or sandboxing a process.
摘要翻译：该主题公开旨在通过对用户的风险等级进行分类来防范恶意软件，这对应于恶意软件被激活的可能性。为了进行分类，收集表示遇到恶意软件的可能性的数据，激活该恶意软件的用户的概率以及对机器的影响被激活。分类映射到保护级别，其可以是动态可调整的，例如基于当前的风险状况。保护级别决定了一种减轻可能的损害的方法，例如通过运行程序作为虚拟化程序，运行虚拟化操作系统或沙箱进程。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式