专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09769186B2 Determining a reputation through network characteristics 有权
公开(公告)号：US09769186B2
公开(公告)日：2017-09-19
申请号：US14581922
申请日：2014-12-23
申请人： McAfee, Inc.
发明人： John D. Teddy , Ramnath Venugopalan , Cedric Cochin , Joel R. Spurlock
IPC分类号： H04L29/06
CPC分类号： H04L63/1416 , H04L63/102 , H04L63/1408 , H04L63/1441 , H04W12/12
摘要： Particular embodiments described herein provide for an electronic device that can be configured to monitor network traffic to and from a device, compare the monitored network traffic to characteristics of the device to determine if the monitored traffic is outside the characteristics of the device, and take remedial action if the monitored traffic is outside the characteristics of the device.

2. 发明授权

US09723006B2 Temporary process deprivileging 有权
公开(公告)号：US09723006B2
公开(公告)日：2017-08-01
申请号：US14752902
申请日：2015-06-27
申请人： McAfee, Inc.
发明人： Zheng Zhang , John D. Teddy , Craig D. Schmugar , Erdem Aktas , Clint R. Merrill , Kunal Mehta
IPC分类号： G06F7/04 , H04L29/06
CPC分类号： H04L63/10 , H04L63/1416 , H04L63/1441
摘要： There is disclosed in an example a computing apparatus, including: a process deprivilging engine operable for: recognizing that a process has an undetermined reputation; intercepting a first access request directed to a first resource; determining that the first resource is not owned by the process; and at least partially blocking access to the first resource. There is further disclosed a method of providing the process deprivileging engine, and one or more computer-readable mediums having stored thereon executable instructions for providing the process deprivileging engine.

3. 发明申请

US20170093897A1 APPLICATION PHENOTYPING 审中-公开
公开(公告)号：US20170093897A1
公开(公告)日：2017-03-30
申请号：US14866459
申请日：2015-09-25
申请人： McAfee, Inc.
发明人： Cedric Cochin , John D. Teddy , Ofir Arkin , James Bean , Joel R. Spurlock , Carl Woodward
IPC分类号： H04L29/06 , G06F17/30
摘要： A collection of techniques is disclosed to allow for the detection of malware that leverages pattern recognition and machine learning to effectively provide “content-less” malware detection, i.e., detecting a process as being an ‘anomaly’ not based on its particular content, but instead based on comparisons of its behavior to known (and characterized) ‘trusted’ application behaviors, i.e., the trusted applications' “phenotypes” and/or the phenotypes of known malware applications. By analyzing the patterns of normal behavior performed by trusted applications as well as malware applications, one can build a set of sophisticated, content-agnostic behavioral models (i.e., “application phenotypes”)—and later compare the processes executed on a user device to the stored behavioral models to determine whether the actual measured behavior reflects a “good” application, or if it differs from the stored behavioral models to a sufficient degree and with a sufficient degree of confidence, thus indicating a potentially malicious application or behavior.

4. 发明申请

US20170061164A1 TWO-DEVICE SCRAMBLED DISPLAY 审中-公开
标题翻译：双装置屏幕显示
公开(公告)号：US20170061164A1
公开(公告)日：2017-03-02
申请号：US14752878
申请日：2015-06-27
申请人： McAfee, Inc.
发明人： Craig D. Schmugar , Clint R. Merrill , Erdem Aktas , James Bean , Cedric Cochin , John D. Teddy
IPC分类号： G06F21/84 , H04L29/06 , H04L9/12 , H04L9/08
CPC分类号： G06F21/84 , H04K1/02 , H04L9/083 , H04L63/068 , H04W12/02
摘要： In an example, there is disclosed a system and method for a two-device scrambled display. A first device displays content in a scrambled form. A second device acts as an interpreter, including an input driver for receiving a scrambled input; an output driver for displaying an organically perceptible output; and one or more logic elements comprising a unscrambling engine operable for: receiving an input on the input driver; detecting that at least a portion of the input is scrambled; unscrambling the scrambled portion of the input; and outputting an unscrambled analog of the scrambled input via the output driver.
摘要翻译：在一个示例中，公开了一种用于双装置加扰显示的系统和方法。第一个设备以加扰形式显示内容。第二设备用作解释器，包括用于接收加扰输入的输入驱动器; 用于显示有机可感知输出的输出驱动器; 以及一个或多个逻辑元件，包括可解压缩引擎，用于：在输入驱动器上接收输入; 检测输入的至少一部分被加扰; 解扰输入的加扰部分; 以及经由所述输出驱动器输出所述加扰输入的未加扰模拟。

5. 发明申请

US20160182538A1 DETERMINING A REPUTATION THROUGH NETWORK CHARACTERISTICS 有权
标题翻译：通过网络特征确定信号
公开(公告)号：US20160182538A1
公开(公告)日：2016-06-23
申请号：US14581922
申请日：2014-12-23
申请人： McAfee, Inc.
发明人： John D. Teddy , Ramnath Venugopalan , Cedric Cochin , Joel R. Spurlock
IPC分类号： H04L29/06
CPC分类号： H04L63/1416 , H04L63/102 , H04L63/1408 , H04L63/1441 , H04W12/12
摘要： Particular embodiments described herein provide for an electronic device that can be configured to monitor network traffic to and from a device, compare the monitored network traffic to characteristics of the device to determine if the monitored traffic is outside the characteristics of the device, and take remedial action if the monitored traffic is outside the characteristics of the device.
摘要翻译：本文所描述的特定实施例提供了一种电子设备，其可被配置为监视来自设备的网络流量，并将所监视的网络流量与设备的特性进行比较，以确定监控的流量是否在设备的特性之外，并采取补救措施如果监视的流量超出设备的特性，则采取措施。

6. 发明授权

US09311480B2 Server-assisted anti-malware client 有权
标题翻译：服务器辅助的反恶意软件客户端
公开(公告)号：US09311480B2
公开(公告)日：2016-04-12
申请号：US13976994
申请日：2013-03-15
申请人： McAfee, Inc.
发明人： John D. Teddy , James Douglas Bean , Gregory William Dalcher , Jeff Hetzler , Andrew Arlin Woodruff
IPC分类号： G06F21/56 , G06F21/51
CPC分类号： G06F21/56 , G06F21/51
摘要： An antimalware support system is provided to support one or more host-based antimalware clients. A query is received from a particular host device that identifies a file detected by an antimalware tool local to the particular host device. Reputation data is determined for the file, and a response to the query is sent to the particular host device. The query response includes the reputation data determined for the file.
摘要翻译：提供反恶意软件支持系统以支持一个或多个基于主机的反恶意软件客户端。从特定主机设备接收到识别由特定主机设备本地的反恶意软件工具检测到的文件的查询。为文件确定信誉数据，并将对查询的响应发送到特定的主机设备。查询响应包括为文件确定的信誉数据。

7. 发明授权

US09223963B2 Systems and methods for behavioral sandboxing 有权
标题翻译：行为沙盒的系统和方法
公开(公告)号：US09223963B2
公开(公告)日：2015-12-29
申请号：US13898284
申请日：2013-05-20
申请人： McAfee, Inc.
发明人： Gregory William Dalcher , John D. Teddy
IPC分类号： G06F21/53 , G06F21/56
CPC分类号： G06F21/53 , G06F11/3466 , G06F21/552 , G06F21/566 , G06F2201/86 , G06F2221/2149 , H04L63/105 , H04L63/145 , H04L63/20
摘要： Methods and system for behavioral sandboxing are described. In one example embodiment, a system for behavioral sandboxing can include a network and a computer. The network communicatively coupled to a source of an executable application. The computer communicatively couple to the network and including a behavioral analysis module and a plurality of execution environments. The behavioral analysis module is configured to perform behavioral analysis on the executable application downloaded over the network. The plurality of execution environments including a standard execution environment and a protected execution environment. The behavioral analysis module is configured to evaluate a plurality of behavioral characteristics of the executable application to determine whether the executable application should be executed within the protected execution environment prior to execution of the executable application. The behavioral analysis module also monitors execution of the executable application to determine whether the execution environment can be changed.
摘要翻译：描述了行为沙盒的方法和系统。在一个示例实施例中，用于行为沙箱的系统可以包括网络和计算机。网络通信地耦合到可执行应用的源。计算机通信地耦合到网络并且包括行为分析模块和多个执行环境。行为分析模块被配置为对通过网络下载的可执行应用程序执行行为分析。多个执行环境包括标准执行环境和受保护的执行环境。行为分析模块被配置为评估可执行应用的多个行为特征，以确定可执行应用是否应在执行可执行应用之前在受保护的执行环境中执行。行为分析模块还监视可执行应用程序的执行，以确定是否可以更改执行环境。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式