专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090265786A1 AUTOMATIC BOTNET SPAM SIGNATURE GENERATION 审中-公开
标题翻译：自动BOTNET垃圾邮件签名生成
公开(公告)号：US20090265786A1
公开(公告)日：2009-10-22
申请号：US12104441
申请日：2008-04-17
申请人： Yinglian Xie , Fang Yu , Kannan Achan , Rina Panigrahy , Ivan Osipkov , Geoffrey J. Hulten
发明人： Yinglian Xie , Fang Yu , Kannan Achan , Rina Panigrahy , Ivan Osipkov , Geoffrey J. Hulten
IPC分类号： G06F21/00
CPC分类号： H04L63/1441 , G06F21/564 , G06F2221/2145 , H04L51/12 , H04L63/126 , H04L2463/144
摘要： A framework may be used for generating URL signatures to identify botnet spam and membership. The framework may take a set of unlabeled emails as input that are grouped based on URLs contained within the emails. The framework may return a set of spam URL signatures and a list of corresponding botnet host IP addresses by analyzing the URLs within the emails that are contained within the groups. Each URL signature may be in the form of either a complete URL string or a URL regular expression. The signatures may be used to identify spam emails launched from botnets, while the knowledge of botnet host identities can help filter other spam emails also sent by them.
摘要翻译：一个框架可以用于生成URL签名来识别僵尸网络垃圾邮件和会员资格。框架可以采用一组未标记的电子邮件作为基于邮件中包含的URL分组的输入。框架可以通过分析包含在组内的电子邮件中的URL来返回一组垃圾邮件URL签名和相应僵尸网络主机IP地址的列表。每个URL签名可以是完整的URL字符串或URL正则表达式的形式。签名可用于识别从僵尸网络发起的垃圾邮件，而僵尸网络主机身份的知识可以帮助过滤他们发送的其他垃圾邮件。

2. 发明授权

US08789171B2 Mining user behavior data for IP address space intelligence 有权
标题翻译：挖掘IP地址空间智能的用户行为数据
公开(公告)号：US08789171B2
公开(公告)日：2014-07-22
申请号：US12055321
申请日：2008-03-26
申请人： Ivan Osipkov , Geoffrey Hulten , John Mehr , Yinglian Xie , Fang Yu
发明人： Ivan Osipkov , Geoffrey Hulten , John Mehr , Yinglian Xie , Fang Yu
IPC分类号： H04L29/06
CPC分类号： H04L67/22 , H04L61/2061 , H04L63/1408 , H04L2463/144
摘要： The claimed subject matter is directed to mining user behavior data for increasing Internet Protocol (“IP”) space intelligence. Specifically, the claimed subject matter provides a method and system of mining user behavior within an IP address space and the application of the IP address space intelligence derived from the mined user behavior.In one embodiment, the IP address space intelligence is formed and/or increased with information obtained from the mined user behavior data. A system of uniquely-identified users is monitored and their behavior within the IP address space is recorded. Further data is mined from estimated characteristics about the user, including the nature of the IP address the user uses to log into the service, and characterizing the IP address according to a network type.
摘要翻译：所要求保护的主题涉及用于增加因特网协议（“IP”）空间智能的采矿用户行为数据。具体地，所要求保护的主题提供了在IP地址空间内挖掘用户行为的方法和系统，以及从开采的用户行为导出的IP地址空间智能的应用。在一个实施例中，使用从开采的用户行为数据获得的信息来形成和/或增加IP地址空间智能。监视唯一标识的用户的系统，并记录其在IP地址空间内的行为。进一步的数据从关于用户的估计特征开始，包括用户用于登录服务的IP地址的性质，以及根据网络类型表征IP地址。

3. 发明申请

US20090249480A1 MINING USER BEHAVIOR DATA FOR IP ADDRESS SPACE INTELLIGENCE 有权
标题翻译：挖掘用户行为数据进行IP地址空间智能
公开(公告)号：US20090249480A1
公开(公告)日：2009-10-01
申请号：US12055321
申请日：2008-03-26
申请人： Ivan Osipkov , Geoffrey Hulten , John Mehr , Yinglian Xie , Fang Yu
发明人： Ivan Osipkov , Geoffrey Hulten , John Mehr , Yinglian Xie , Fang Yu
IPC分类号： G06F11/00
CPC分类号： H04L67/22 , H04L61/2061 , H04L63/1408 , H04L2463/144
摘要： The claimed subject matter is directed to mining user behavior data for increasing Internet Protocol (“IP”) space intelligence. Specifically, the claimed subject matter provides a method and system of mining user behavior within an IP address space and the application of the IP address space intelligence derived from the mined user behavior.In one embodiment, the IP address space intelligence is formed and/or increased with information obtained from the mined user behavior data. A system of uniquely-identified users is monitored and their behavior within the IP address space is recorded. Further data is mined from estimated characteristics about the user, including the nature of the IP address the user uses to log into the service, and characterizing the IP address according to a network type.
摘要翻译：所要求保护的主题涉及用于增加因特网协议（“IP”）空间智能的采矿用户行为数据。具体地，所要求保护的主题提供了在IP地址空间内挖掘用户行为的方法和系统，以及从开采的用户行为导出的IP地址空间智能的应用。在一个实施例中，使用从开采的用户行为数据获得的信息来形成和/或增加IP地址空间智能。监视唯一标识的用户的系统，并记录其在IP地址空间内的行为。进一步的数据从关于用户的估计特征开始，包括用户用于登录服务的IP地址的性质，以及根据网络类型表征IP地址。

4. 发明授权

US08370902B2 Rescuing trusted nodes from filtering of untrusted network entities 有权
标题翻译：拯救可信节点过滤不可信网络实体
公开(公告)号：US08370902B2
公开(公告)日：2013-02-05
申请号：US12697179
申请日：2010-01-29
申请人： Malcolm H Davis , Aravind K Ramachandran , Geoffrey J Hulten , Ivan Osipkov , Milenko Drinic , Eliot C. Gillum , Krishna C. Vitaldevara , Jason D. Walter , Mehrdad Bidgoli , Robert L. McCann
发明人： Malcolm H Davis , Aravind K Ramachandran , Geoffrey J Hulten , Ivan Osipkov , Milenko Drinic , Eliot C. Gillum , Krishna C. Vitaldevara , Jason D. Walter , Mehrdad Bidgoli , Robert L. McCann
IPC分类号： H04L29/06
CPC分类号： G06F15/16 , G06F21/00
摘要： Network entities controlling a set of nodes may vary by trustworthiness, such as tolerance for nodes that send spam, distribute malware, or perform denial-of-service attacks. A device receiving such activities may identify a trust rating of the network entity and apply appropriately stringent filtering (such as spam evaluation) to activities received from nodes controlled by the network entity. However, a poor trust rating of a network entity may subject a legitimate node controlled by the network entity to inefficiently or unfairly stringent activity filtering. Instead, the device may evaluate the activities of a particular node, assign a trust rating to the node, and if the trust rating of the node is higher than the trust rating of the network entity, apply less stringent activity filtering to the activities of the node, thereby “rescuing” the node from the more stringent activity filtering applied to the other nodes of the network entity.
摘要翻译：控制一组节点的网络实体可以由可信赖性变化，例如发送垃圾邮件，分发恶意软件或执行拒绝服务攻击的节点的容限。接收这种活动的设备可以识别网络实体的信任等级，并对从由网络实体控制的节点接收到的活动进行适当严格的过滤（例如垃圾评估）。然而，网络实体的不良信任等级可能使由网络实体控制的合法节点受到无效或不公平的严格活动过滤。相反，设备可以评估特定节点的活动，为节点分配信任评级，并且如果节点的信任等级高于网络实体的信任等级，则对活动的活动应用较不严格的活动过滤节点，从而将节点从应用于网络实体的其他节点的更严格的活动过滤中救出。

5. 发明申请

US20110191847A1 ACTIVITY FILTERING BASED ON TRUST RATINGS OF NETWORK ENTITIES 有权
标题翻译：基于网络实体信任评级的活动过滤
公开(公告)号：US20110191847A1
公开(公告)日：2011-08-04
申请号：US12697170
申请日：2010-01-29
申请人： Malcolm H. Davis , Aravind K. Ramachandran , Geoffrey J. Hulten , Ivan Osipkov , Milenko Drinic , Eliot C. Gillum , Krishna C. Vitaldevara , Jason D. Walter , Mehrdad Bidgoli , Robert L. McCann
发明人： Malcolm H. Davis , Aravind K. Ramachandran , Geoffrey J. Hulten , Ivan Osipkov , Milenko Drinic , Eliot C. Gillum , Krishna C. Vitaldevara , Jason D. Walter , Mehrdad Bidgoli , Robert L. McCann
IPC分类号： G06F15/173 , G06F15/16 , G06F21/00
CPC分类号： G06F15/16 , G06F15/173 , G06F21/00 , H04L63/0236 , H04L63/1425
摘要： The filtering of activities generated by nodes of a network while interacting with a device may be performed by evaluating the desirability of the activities (e.g., a spam or not-spam determination of email messages sent by the node) and assigning a trust rating to the node. However, nodes are often identified by network address, and an operator of a node sending undesirable activities may reassign the network address of the node in order to avoid heavy filtering. Instead, nodes may be identified as being controlled by a network entity (e.g., an autonomous system identified in a border gateway protocol routing table.) The network entity is assigned a network entity trust rating based on the trust ratings of the nodes controlled thereby, and an appropriate level of activity filtering based on the network entity trust rating may be selected for subsequent activities received from all nodes controlled by the network entity.
摘要翻译：可以通过评估活动的可取性（例如，由节点发送的电子邮件的垃圾邮件或非垃圾邮件确定）来对网络节点生成的活动进行过滤，并且向节点。然而，节点通常由网络地址识别，并且发送不期望的活动的节点的运营商可以重新分配节点的网络地址，以避免严重的过滤。相反，节点可以被识别为由网络实体（例如，边界网关协议路由表中标识的自治系统）来控制。网络实体基于由其控制的节点的信任等级被分配网络实体信任等级，并且可以针对从由网络实体控制的所有节点接收的后续活动来选择基于网络实体信任等级的适当级别的活动过滤。

6. 发明授权

US07870609B2 Detection and removal of undesirable items in a data processing environment 有权
标题翻译：在数据处理环境中检测和移除不需要的项目
公开(公告)号：US07870609B2
公开(公告)日：2011-01-11
申请号：US11772099
申请日：2007-06-29
申请人： Geoffrey J. Hulten , John L. Scarrow , Eliot C. Gillum , Kumar S. Srivastava , Anatoliy Panasyuk , Ivan Osipkov
发明人： Geoffrey J. Hulten , John L. Scarrow , Eliot C. Gillum , Kumar S. Srivastava , Anatoliy Panasyuk , Ivan Osipkov
IPC分类号： G06F11/00 , G06F12/14
CPC分类号： H04L63/104 , G06F21/577 , H04L63/1416 , H04L63/1441
摘要： Functionality is described for addressing a threat to the security of a user device that utilizes a network-accessible service. The functionality operates by assessing the likelihood that the user device is infected by the undesirable item. When the user device makes a request to access the network-accessible service, the functionality can interact with the user device in a manner that is governed by the assessed likelihood that the user device is infected by the undesirable item.
摘要翻译：描述了用于解决利用网络可访问服务的用户设备的安全性的威胁的功能。该功能通过评估用户设备被不期望的项目感染的可能性来进行操作。当用户设备进行访问网络可访问服务的请求时，功能可以以由用户设备被不期望的项目感染的被评估的可能性来管理的方式与用户设备进行交互。

7. 发明申请

US20090006575A1 Detection and Removal of Undesirable Items in a Data Processing Environment 有权
标题翻译：在数据处理环境中检测和删除不需要的项目
公开(公告)号：US20090006575A1
公开(公告)日：2009-01-01
申请号：US11772099
申请日：2007-06-29
申请人： Geoffrey J. Hulten , John L. Scarrow , Eliot C. Gillum , Kumar S. Srivastava , Anatoliy Panasyuk , Ivan Osipkov
发明人： Geoffrey J. Hulten , John L. Scarrow , Eliot C. Gillum , Kumar S. Srivastava , Anatoliy Panasyuk , Ivan Osipkov
IPC分类号： G06F15/16
CPC分类号： H04L63/104 , G06F21/577 , H04L63/1416 , H04L63/1441
摘要： Functionality is described for addressing a threat to the security of a user device that utilizes a network-accessible service. The functionality operates by assessing the likelihood that the user device is infected by the undesirable item. When the user device makes a request to access the network-accessible service, the functionality can interact with the user device in a manner that is governed by the assessed likelihood that the user device is infected by the undesirable item.
摘要翻译：描述了用于解决利用网络可访问服务的用户设备的安全性的威胁的功能。该功能通过评估用户设备被不期望的项目感染的可能性来进行操作。当用户设备进行访问网络可访问服务的请求时，功能可以以由用户设备被不期望的项目感染的被评估的可能性来管理的方式与用户设备进行交互。

8. 发明授权

US09098459B2 Activity filtering based on trust ratings of network 有权
标题翻译：基于网络信任评级的活动过滤
公开(公告)号：US09098459B2
公开(公告)日：2015-08-04
申请号：US12697170
申请日：2010-01-29
申请人： Malcolm H Davis , Aravind K Ramachandran , Geoffrey J Hulten , Ivan Osipkov , Milenko Drinic , Eliot C. Gillum , Krishna C. Vitaldevara , Jason D. Walter , Mehrdad Bidgoli , Robert L. McCann
发明人： Malcolm H Davis , Aravind K Ramachandran , Geoffrey J Hulten , Ivan Osipkov , Milenko Drinic , Eliot C. Gillum , Krishna C. Vitaldevara , Jason D. Walter , Mehrdad Bidgoli , Robert L. McCann
IPC分类号： G06F11/00 , G06F15/16 , H04L29/06 , G06F15/173 , G06F21/00
CPC分类号： G06F15/16 , G06F15/173 , G06F21/00 , H04L63/0236 , H04L63/1425
摘要： The filtering of activities generated by nodes of a network while interacting with a device may be performed by evaluating the desirability of the activities (e.g., a spam or not-spam determination of email messages sent by the node) and assigning a trust rating to the node. However, nodes are often identified by network address, and an operator of a node sending undesirable activities may reassign the network address of the node in order to avoid heavy filtering. Instead, nodes may be identified as being controlled by a network entity (e.g., an autonomous system identified in a border gateway protocol routing table.) The network entity is assigned a network entity trust rating based on the trust ratings of the nodes controlled thereby, and an appropriate level of activity filtering based on the network entity trust rating may be selected for subsequent activities received from all nodes controlled by the network entity.
摘要翻译：可以通过评估活动的可取性（例如，由节点发送的电子邮件的垃圾邮件或非垃圾邮件确定）来对网络节点生成的活动进行过滤，并且向节点。然而，节点通常由网络地址识别，并且发送不期望的活动的节点的运营商可以重新分配节点的网络地址，以避免严重的过滤。相反，节点可以被识别为由网络实体（例如，边界网关协议路由表中标识的自治系统）来控制。网络实体基于由其控制的节点的信任等级被分配网络实体信任等级，并且可以针对从由网络实体控制的所有节点接收的后续活动来选择基于网络实体信任等级的适当级别的活动过滤。

9. 发明申请

US20110191832A1 RESCUING TRUSTED NODES FROM FILTERING OF UNTRUSTED NETWORK ENTITIES 有权
标题翻译：通过对非侵权网络实体进行过滤来调用受信任的代码
公开(公告)号：US20110191832A1
公开(公告)日：2011-08-04
申请号：US12697179
申请日：2010-01-29
申请人： Malcolm H. Davis , Aravind K. Ramachandran , Geoffrey J. Hulten , Ivan Osipkov , Milenko Drinic , Eliot C. Gillum , Krishna C. Vitaldevara , Jason D. Walter , Mehrdad Bidgoli , Robert L. McCann
发明人： Malcolm H. Davis , Aravind K. Ramachandran , Geoffrey J. Hulten , Ivan Osipkov , Milenko Drinic , Eliot C. Gillum , Krishna C. Vitaldevara , Jason D. Walter , Mehrdad Bidgoli , Robert L. McCann
IPC分类号： G06F21/00 , G06F15/16
CPC分类号： G06F15/16 , G06F21/00
摘要： Network entities controlling a set of nodes may vary by trustworthiness, such as tolerance for nodes that send spam, distribute malware, or perform denial-of-service attacks. A device receiving such activities may identify a trust rating of the network entity and apply appropriately stringent filtering (such as spam evaluation) to activities received from nodes controlled by the network entity. However, a poor trust rating of a network entity may subject a legitimate node controlled by the network entity to inefficiently or unfairly stringent activity filtering. Instead, the device may evaluate the activities of a particular node, assign a trust rating to the node, and if the trust rating of the node is higher than the trust rating of the network entity, apply less stringent activity filtering to the activities of the node, thereby “rescuing” the node from the more stringent activity filtering applied to the other nodes of the network entity.
摘要翻译：控制一组节点的网络实体可以由可信赖性变化，例如发送垃圾邮件，分发恶意软件或执行拒绝服务攻击的节点的容限。接收这种活动的设备可以识别网络实体的信任等级，并对从由网络实体控制的节点接收到的活动进行适当严格的过滤（例如垃圾评估）。然而，网络实体的不良信任等级可能使由网络实体控制的合法节点受到无效或不公平的严格活动过滤。相反，设备可以评估特定节点的活动，为节点分配信任评级，并且如果节点的信任等级高于网络实体的信任等级，则对活动的活动应用较不严格的活动过滤节点，从而将节点从应用于网络实体的其他节点的更严格的活动过滤“拯救”。

10. 发明申请

US20120167213A1 SAFE FILE TRANSMISSION AND REPUTATION LOOKUP 有权
标题翻译：安全文件传输和信誉查询
公开(公告)号：US20120167213A1
公开(公告)日：2012-06-28
申请号：US13412299
申请日：2012-03-05
申请人： Geoff Hulten , John Scarrow , Ivan Osipkov , Kristofer N. Iverson
发明人： Geoff Hulten , John Scarrow , Ivan Osipkov , Kristofer N. Iverson
IPC分类号： G06F21/00
CPC分类号： G06F21/566 , G06F21/51 , G06F21/6209
摘要： A method of safe file transmission and reputation lookup is provided. As a part of the safe file transmission and reputation lookup methodology, a data file that is to be made available to a data file receiver is accessed and it is determined whether the data file needs to be provided a protective file. The data file is wrapped in a protective file to create a non-executing package file. Access is provided to the non-executing package file where the associated data file is prevented from being executed until data file reputation information is received.
摘要翻译：提供了一种安全文件传输和信誉查询的方法。作为安全文件传输和信誉查询方法的一部分，访问要向数据文件接收器提供的数据文件，并确定是否需要为数据文件提供保护文件。数据文件被包装在保护文件中以创建不执行的包文件。访问被提供给不执行的包文件，其中防止相关联的数据文件被执行，直到接收到数据文件信誉信息。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式