Malicious mobile code runtime monitoring system and methods
DC CAFC
First Claim
1. A computer-based method, comprising the steps of:
- receiving an incoming Downloadable;
deriving security profile data for the Downloadable, including a list of suspicious computer operations that may be attempted by the Downloadable; and
storing the Downloadable security profile data in a database.
6 Assignments
Litigations
8 Petitions
Accused Products
Abstract
Protection systems and methods provide for protecting one or more personal computers (“PCs”) and/or other intermittently or persistently network accessible devices or processes from undesirable or otherwise malicious operations of Java TN applets, ActiveX™ controls, JavaScript™ scripts, Visual Basic scripts, add-ins, downloaded/uploaded programs or other “Downloadables” or “mobile code” in whole or part. A protection engine embodiment provides for monitoring information received, determining whether received information does or is likely to include executable code, and if so, causes mobile protection code (MPC) to be transferred to and rendered operable within a destination device of the received information. An MPC embodiment further provides, within a Downloadable-destination, for initiating the Downloadable, enabling malicious Downloadable operation attempts to be received by the MPC, and causing (predetermined) corresponding operations to be executed in response to the attempts.
144 Citations
18 Claims
-
1. A computer-based method, comprising the steps of:
-
receiving an incoming Downloadable; deriving security profile data for the Downloadable, including a list of suspicious computer operations that may be attempted by the Downloadable; and storing the Downloadable security profile data in a database. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
-
-
10. A system for managing Downloadables, comprising:
-
a receiver for receiving an incoming Downloadable; a Downloadable scanner coupled with said receiver, for deriving security profile data for the Downloadable, including a list of suspicious computer operations that may be attempted by the Downloadable; and a database manager coupled with said Downloadable scanner, for storing the Downloadable security profile data in a database. - View Dependent Claims (11, 12, 13, 14, 15, 16, 17, 18)
-
Specification
-
- Resources
-
Current AssigneeFinjan Holdings, Inc. (SoftBank Group Corp.)
-
Original AssigneeFinjan, Inc. (SoftBank Group Corp.)
-
InventorsEdery, Yigal Mordechai, Kroll, David R., Touboul, Shlomo, Vered, Nirmrod Itzhak
-
Primary Examiner(s)REVAK, CHRISTOPHER A
-
Application NumberUS13/290,708Publication NumberTime in Patent Office862 DaysField of SearchNoneUS Class Current726/24CPC Class CodesG06F 21/51 at application loading time...G06F 21/53 by executing in a restricte...G06F 21/56 Computer malware detection ...G06F 2221/033 Test or assess softwareH04L 63/1441 Countermeasures against mal...H04L 63/145 the attack involving the pr...H04L 63/168 above the transport layerH04L 63/20 for managing network securi...
