专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09311481B1 Systems and methods for classifying package files as trojans 有权
标题翻译：将包文件分类为木马的系统和方法
公开(公告)号：US09311481B1
公开(公告)日：2016-04-12
申请号：US14486424
申请日：2014-09-15
申请人： Symantec Corporation
发明人： Abubakar Wawda , Matthew Yeo , Jun Mao
IPC分类号： G06F21/56 , H04L29/06
CPC分类号： H04L63/145 , G06F21/51 , G06F21/563 , H04L63/1416
摘要： A computer-implemented method for classifying package files as Trojans may include (1) detecting a resemblance between an unclassified package file and a known legitimate package file, (2) determining that the unclassified package file is signed by a different signatory than a signatory that signed the known legitimate package file, (3) determining that a feature of the unclassified package file is suspicious, the feature being absent from the known legitimate package file, and (4) classifying the unclassified package file as a Trojan version of the known legitimate package file based on the unclassified package file being signed by the different signatory and having the suspicious feature. Various other methods, systems, and computer-readable media are also disclosed.
摘要翻译：用于将包文件分类为木马的计算机实现的方法可以包括（1）检测未分类包文件和已知合法包文件之间的相似性，（2）确定未分类包文件由签名者签名的签名者签名已知的合法包文件，（3）确定未分类的包文件的特征是可疑的，该特征不在已知的合法包文件中，以及（4）将未分类的包文件分类为已知合法的包装文件的木马版本基于未分类的包文件由不同签名人签名并具有可疑特征的包文件。还公开了各种其它方法，系统和计算机可读介质。

2. 发明授权

US09703956B1 Systems and methods for categorizing virtual-machine-aware applications for further analysis 有权
公开(公告)号：US09703956B1
公开(公告)日：2017-07-11
申请号：US14732809
申请日：2015-06-08
申请人： Symantec Corporation
发明人： Andrew Watson , Abubakar Wawda
IPC分类号： G06F21/56
CPC分类号： G06F21/562 , G06F21/563 , G06F21/566
摘要： The disclosed computer-implemented method for categorizing virtual-machine-aware applications for further analysis may include (1) identifying a plurality of virtual-machine-aware applications, where each of the plurality of virtual-machine-aware applications exhibits different behavior when the virtual-machine-aware application detects that the virtual-machine-aware application is executing in a physical computing environment rather than in a virtual computing environment, (2) identifying a plurality of non-virtual-machine-aware applications that do not exhibit different behavior when executed in the physical computing environment rather than in the virtual computing environment, (3) determining at least one characteristic that differentiates the virtual-machine-aware applications from the non-virtual-machine-aware applications, (4) analyzing an uncategorized application to determine whether the uncategorized application includes the characteristic, and (5) preventing the uncategorized application from evading complete analysis by sending the uncategorized application to the physical computing environment for further analysis. Various other methods, systems, and computer-readable media are also disclosed.

3. 发明申请

US20150067831A1 SYSTEMS AND METHODS FOR IDENTIFYING PRIVATE KEYS THAT HAVE BEEN COMPROMISED 有权
标题翻译：用于识别已经被压缩的私有密钥的系统和方法
公开(公告)号：US20150067831A1
公开(公告)日：2015-03-05
申请号：US14015168
申请日：2013-08-30
申请人： Symantec Corporation
发明人： Abubakar Wawda , Jun Mao , Matthew Yeo
IPC分类号： G06F21/57
CPC分类号： G06F21/57 , G06F21/567 , G06F2221/2115 , H04L63/126 , H04L63/1441 , H04L63/20
摘要： A computer-implemented method for identifying private keys that have been compromised may include (1) identifying a private key that enables a signatory to digitally sign applications, (2) collecting information about the private key from at least one public source, (3) determining, based on the information collected from the public source, that the private key has been compromised and is accessible to unauthorized signatories, and (4) performing a security action in response to determining that the private key has been compromised and is accessible to the unauthorized signatories. Various other methods, systems, and computer-readable media are also disclosed.
摘要翻译：用于识别已经被泄密的私钥的计算机实现的方法可以包括（1）识别允许签名者对应用进行数字签名的私钥，（2）从至少一个公共源收集关于私钥的信息，（3）根据从公共来源收集的信息，确定私钥已经被破坏并且被未经授权的签署者访问，以及（4）执行安全措施以响应确定私钥已经被泄密并且可被访问未经授权的签字人还公开了各种其它方法，系统和计算机可读介质。

4. 发明授权

US09692773B1 Systems and methods for identifying detection-evasion behaviors of files undergoing malware analyses 有权
公开(公告)号：US09692773B1
公开(公告)日：2017-06-27
申请号：US14567440
申请日：2014-12-11
申请人： Symantec Corporation
发明人： Andrew Watson , Abubakar Wawda
IPC分类号： G06F21/00 , H04L29/06 , G06F21/56 , G06F21/53
CPC分类号： H04L63/1416 , G06F21/53 , G06F21/56 , G06F21/566
摘要： The disclosed computer-implemented method for identifying detection-evasion behaviors of files undergoing malware analyzes may include (1) monitoring, by a plurality of monitor components related to an automated execution environment, a file that is undergoing a malware analysis in the automated execution environment, (2) detecting a suspicious discrepancy among the monitor components with respect to computing activity observed in connection with the malware analysis by (A) identifying a monitor component that has observed the computing activity in connection with the malware analysis and (B) identifying another monitor component that has not observed the computing activity in connection with the malware analysis, and then (3) determining, based at least in part on the suspicious discrepancy, that the file demonstrates a detection-evasion behavior that led to the other monitor component not observing the computing activity in connection with the malware analysis. Various other methods, systems, and computer-readable media are also disclosed.

5. 发明授权

US09202057B2 Systems and methods for identifying private keys that have been compromised 有权
标题翻译：用于识别已被泄密的私钥的系统和方法
公开(公告)号：US09202057B2
公开(公告)日：2015-12-01
申请号：US14015168
申请日：2013-08-30
申请人： Symantec Corporation
发明人： Jun Mao , Matthew Yeo , Abubakar Wawda
IPC分类号： H04L29/06 , G06F21/57 , G06F21/56
CPC分类号： G06F21/57 , G06F21/567 , G06F2221/2115 , H04L63/126 , H04L63/1441 , H04L63/20
摘要： A computer-implemented method for identifying private keys that have been compromised may include (1) identifying a private key that enables a signatory to digitally sign applications, (2) collecting information about the private key from at least one public source, (3) determining, based on the information collected from the public source, that the private key has been compromised and is accessible to unauthorized signatories, and (4) performing a security action in response to determining that the private key has been compromised and is accessible to the unauthorized signatories. Various other methods, systems, and computer-readable media are also disclosed.
摘要翻译：用于识别已经被泄密的私钥的计算机实现的方法可以包括（1）识别允许签名者对应用进行数字签名的私钥，（2）从至少一个公共源收集关于私钥的信息，（3）根据从公共来源收集的信息，确定私钥已经被破坏并且被未经授权的签署者访问，以及（4）执行安全措施以响应确定私钥已经被泄密并且可被访问未经授权的签字人还公开了各种其它方法，系统和计算机可读介质。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式