U.S. patents available from 1976 to present.
U.S. patent applications available from 2005 to present.

Icon_funbox Did You Know...

...that Thomas Edison's patent application on his phonograph was approved by the Patent Office in just seven weeks? In contrast, it took Gordon Gould, the inventor of the laser, 30 years to obtain his patent -- finally awarded in 1988!

Newsletter  PatentStorm News

Make the Most of Our Site

See this month's Top Inventors and Most Cited Patents.

Stay on top of the latest innovations by subscribing to an RSS feed.

Registered users: Manage your profile.

 

Class 726/22 - MONITORING OR SCANNING OF SOFTWARE OR DATA INCLUDING ATTACK PREVENTION


Subclass of Class 726 - Information security
Definition: Subject matter comprising systems, methods, and apparatus
No. of patents: 1041
Last issue date: 02/07/2012


1                      
NumberTitleIssue Date
8112800Multi-layered application classification and decoding
An intrusion detection system is described that is capable of applying a plurality of stacked (layered) application-layer decoders to extract encapsulated application-layer data from a tunneled packet flow produced by multiple applications operating at the applicati...
02/07/2012
8112799Method, system, and computer program product for avoiding cross-site scripting attacks
A system and method for protecting a user against a cross-site scripting attack or other network attack that relies on scripting code embedded within a uniform resource locator (URL) are described. Validation software executing on a client computer system may interc...
02/07/2012
8112798Hardware-aided software code measurement
Described is an independent computation environment that is built into one or more hardware components of a computer system, wherein the independent computation environment hosts a logic that measures the health of other software code that executes in memory. Exampl...
02/07/2012
8112801Method and apparatus for detecting malware
A method of detecting malware may include: a) examining header data in each PDU transferred by a port of an access switch to identify PDUs transferred from a local network device, b) extracting a far-end device address for PDUs based at least in part on examination ...
02/07/2012
8112802Verification of outsourced data streams
Embodiments disclosed herein are directed to verifying query results of an untrusted server. A data owner outsources a data stream to the untrusted server, which is configured to respond to a query from a client with the query result, which is returned to the client...
02/07/2012
8108928Adaptive traitor tracing
One embodiment of the present invention includes a method for traitor tracing that selects a probability distribution for the assignment of file-segment variations in a digital file. This probability distribution is selected to improve traceability for a particular ...
01/31/2012
8104086Heuristically detecting spyware/adware registry activity
Methods, apparati, and computer-readable media for detecting the presence of malicious computer code in a computer. In a method embodiment, persistence points in an operating system of the computer are examined (31). When a pointer to a temporary directory is...
01/24/2012
8104087Systems and methods for automated data anomaly correction in a computer network
Systems and methods for correcting an anomaly in a target computer that is part of a network of computers. An anomaly is detected in data stored on a target computer and it is determined what corrective data is needed to correct the anomaly. A donor computer with th...
01/24/2012
8099780Message screening system
A message screening system includes routing to a supervisory recipient an electronic message directed to an intended recipient. The supervisory recipient then is allowed to screen the electronic message by approving or rejecting the electronic message. The electroni...
01/17/2012
8099781Method of managing and mitigating security risks through planning
An exemplary method is provided for managing and mitigating security risks through planning. A first security-related information of a requested product is received. A second security-related information of resources that are available for producing the requested pr...
01/17/2012
8099782Event aggregation in a network
A network system can have a plurality of distributed software agents configured to collect events from network devices. In one embodiment, the agents are configured to aggregate the events. In one embodiment of the present invention, an agent includes a device inter...
01/17/2012
8095979Analysis of event information to perform contextual audit
Analysis of audit information that takes into account a wide context allows for a rich picture from which system conditions may be assessed. Event information about various events that have occurred or are occurring, on various sources in the computing arrangement, ...
01/10/2012
8095980Detecting malicious behavior in data transmission of a de-duplication system
The present invention provides a method and system of detecting malicious behavior in a series of data transmission de-duplication requests of a de-duplicated computer system. In an exemplary embodiment, the method and system include, (1) if the series includes at l...
01/10/2012
8091128Information flow enforcement for RISC-style assembly code in the presence of timing-related covert channels and multi-threading
A method and apparatus is disclosed for performing information flow enforcement for assembly code. In one embodiment, the method comprises receiving assembly code having timing annotations with type information that enforce information flow with respect to one or mo...
01/03/2012
8091129Electronic message filtering enhancements
In some embodiments, techniques for filtering electronic messages may include various enhancements. ...
01/03/2012
8091127Heuristic malware detection
Embodiments of the present invention provide a method, system and computer program product for the heuristic malware detection. In one embodiment of the invention, a heuristic malware detection method can include merging a baseline inventory of file attributes for r...
01/03/2012
8087081Selection of remotely located servers for computer security operations
A client computer may be configured to perform computer security operation services, such as malicious code scanning and protection against online threats, using one of several remotely located server computers. The client computer may be configured to determine an ...
12/27/2011
8087080Inspection of downloadable contents for malicious codes
A web page available for download from a web server computer may include a reference to a web widget. When the web page is received in a client computer, the reference executes and retrieves the web widget from a security server computer. The web widget may be confi...
12/27/2011
8087079Byte-distribution analysis of file security
A method for scanning files for security, including receiving an unfamiliar file for scanning, if the determining indicates that the mime type is suitable for analysis, then processing a buffer of file data from the unfamiliar file, including generating a histogram ...
12/27/2011
8087082Apparatus for filtering server responses
A data processing apparatus, comprising at least one processor and a traffic monitor comprising logic which, when executed by the processor, causes the processor to perform: creating, using forward Domain Name System (DNS) lookups, a mapping of domain names to Inter...
12/27/2011
8082584System, method, and computer program product for conditionally performing a scan on data based on an associated data structure
A system, method, and computer program product are provided for conditionally performing a scan of data based on an associated data structure. In use, at least one aspect is identified for each of a first plurality of scanners utilized to perform a scan on data at a...
12/20/2011
8082583Delegation of content filtering services between a gateway and trusted clients in a computer network
Method and system for performing content filtering services in a computer network. A gateway computer may be configured to be in the data path of network communications between client computers in a private computer network and computers in a public computer network...
12/20/2011
8082585Protecting computers from malware using a hardware solution that is not alterable by any software
A Computer System that protects itself from Malware by assuring the security of critical software elements including but not limited to Operating Systems, Applications and I/O Drivers. These critical software elements cannot be altered by Malware during normal opera...
12/20/2011
8079082Verification of software application authenticity
Various techniques are provided for verifying the authenticity of software applications. Such techniques are particularly useful for verifying the authenticity of software applications used in online transactions involving users, payment service providers, and/or me...
12/13/2011
8079080Method, system and computer program product for detecting security threats in a computer network
A method, system and computer program product detect attempts to send significant amounts of information out via HTTP tunnels to rogue Web servers from within an otherwise firewalled network. A related goal is to help detect spyware programs. Filters, based on the a...
12/13/2011
8079081Systems and methods for automated log event normalization using three-staged regular expressions
Methods and systems for normalizing log messages. Some methods include obtaining a freeform log message from one of many disparate programs. The methods can include determining which program originated the message and, based on that, determining a signature which ma...
12/13/2011
8074275Preventing network denial of service attacks by early discard of out-of-order segments
A method of preventing network denial of service attacks by early discard of out-of-order segments comprises creating a reassembly queue for a connection between a first network node and a second network node, wherein the connection has been established based on a t...
12/06/2011
8074276Method and system for administration of security services within a virtual execution environment (VEE) infrastructure
A system and method for managing administration of security services provided to users includes a computer system and an operating system running on the computer system. A plurality of Virtual Execution Environments (VEEs) are executed on the computer system. The VE...
12/06/2011
8069481Systems and methods for message threat management
The present invention is directed to systems and methods for detecting unsolicited and threatening communications and communicating threat information related thereto. Threat information is received from one or more sources; such sources can include external securit...
11/29/2011
8069482Device, system and method of database security
Some demonstrative embodiments of the invention relate to a method, device and system of database security. One demonstrative embodiment of the invention includes an intrusion detection sensor to scan transactions on a database, and generate an event based on a dete...
11/29/2011
8069480Method and system for defining a safe storage area for use in recovering a computer system
A method for defining an area to record changes made to a computer system is provided. A safe area is defined on a primary storage device of the computer system and information is stored on the location of the safe area on a secondary storage device. Further, the co...
11/29/2011
8065730Anti-malware scanning in a virtualized file system environment
A computer includes a file system that supports virtualization. A scanning module identifies a file to be scanned for malware and a virtualized file detection module determines whether the file is virtualized. A file retrieval module locates a virtualized version of...
11/22/2011
8065728Malware prevention system monitoring kernel events
A malware prevention system monitors kernel level events of the operating system and applies user programmable or preprepared policies to those events to detect and block malware. ...
11/22/2011
8065729Method and apparatus for generating network attack signature
Provided is a method and apparatus for generating a network attack signature capable of generating a signature having a high reliability while minimizing a whitelist used to prevent false positive. An application header and application data are separated from each o...
11/22/2011
8065731System and method for malware containment in communication networks
The present invention relates to a method for containing propagation of a malware in a communication network having a plurality of communication nodes. The method steps include obtaining communication statistics from a traffic trace of the communication network, gen...
11/22/2011
8065732Object reference in a system
A system can be configured using configuration objects that have the ability to refer to one another. In one embodiment, the present invention includes such a system having a plurality of objects used to configure the system, each object having a uniform resource id...
11/22/2011
8065726Scalable anti-replay windowing
The present disclosure provides a method for scalable anti-replay windowing. According to one exemplary embodiment, the method may include receiving at least one data packet having at least one new sequence number. The method may also include comparing the at least ...
11/22/2011
8065727Monitoring network service affecting events, taking action, and automating subscriber notification
In one embodiment, a method includes identifying at least one parameter as being associated with a service provided to an entity, as for example a subscriber. The service is arranged to service the entity. The method also includes monitoring the parameter to determi...
11/22/2011
8065725Systems and methods for enhanced network security
Systems and methods for an information system security infrastructure are described. One embodiment of the present invention comprises global Internet-scale defense infrastructure, referred to as the Intrusion Detection Force (IDF). The IDF comprises a virtual infra...
11/22/2011
8060934Dynamic trust management
A method and apparatus are provided for tracking the state of a software component in use on a computing platform. Upon a change of a first type in the software component (such as a change to an integrity-critical part of the component), an appropriate integrity met...
11/15/2011
1                      
 
Sign InRegister
Username  
Password   
forgot password?