专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US10171490B2 System and method for strategic anti-malware monitoring 有权
公开(公告)号：US10171490B2
公开(公告)日：2019-01-01
申请号：US14738216
申请日：2015-06-12
申请人： Tenable Network Security, Inc.
发明人： Marcus J. Ranum , Ron Gula
IPC分类号： G06F21/56 , H04L29/06 , G06F17/30 , H04L29/12 , H04L29/08
摘要： The system and method described herein may leverage active network scanning and passive network monitoring to provide strategic anti-malware monitoring in a network. In particular, the system and method described herein may remotely connect to managed hosts in a network to compute hashes or other signatures associated with processes running thereon and suspicious files hosted thereon, wherein the hashes may communicated to a cloud database that aggregates all known virus or malware signatures that various anti-virus vendors have cataloged to detect malware infections without requiring the hosts to have a local or resident anti-virus agent. Furthermore, running processes and file system activity may be monitored in the network to further detect malware infections. Additionally, the network scanning and network monitoring may be used to detect hosts that may potentially be participating in an active botnet or hosting botnet content and audit anti-virus strategies deployed in the network.

2. 发明申请

US20150281259A1 SYSTEM AND METHOD FOR STRATEGIC ANTI-MALWARE MONITORING 审中-公开
标题翻译：用于战略防恶意监测的系统和方法
公开(公告)号：US20150281259A1
公开(公告)日：2015-10-01
申请号：US14738216
申请日：2015-06-12
申请人： Tenable Network Security, Inc.
发明人： Marcus J. Ranum , Ron Gula
IPC分类号： H04L29/06 , H04L29/08 , G06F17/30 , H04L29/12
CPC分类号： H04L63/145 , G06F17/30964 , G06F21/56 , H04L61/1511 , H04L63/1416 , H04L63/1433 , H04L67/02 , H04L67/10
摘要： The system and method described herein may leverage active network scanning and passive network monitoring to provide strategic anti-malware monitoring in a network. In particular, the system and method described herein may remotely connect to managed hosts in a network to compute hashes or other signatures associated with processes running thereon and suspicious files hosted thereon, wherein the hashes may communicated to a cloud database that aggregates all known virus or malware signatures that various anti-virus vendors have catalogued to detect malware infections without requiring the hosts to have a local or resident anti-virus agent. Furthermore, running processes and file system activity may be monitored in the network to further detect malware infections. Additionally, the network scanning and network monitoring may be used to detect hosts that may potentially be participating in an active botnet or hosting botnet content and audit anti-virus strategies deployed in the network.
摘要翻译：本文描述的系统和方法可以利用主动网络扫描和被动网络监控来在网络中提供战略性反恶意软件监视。特别地，本文描述的系统和方法可以远程连接到网络中的被管理的主机以计算与其上运行的进程相关联的哈希或其他签名以及托管在其上的可疑文件，其中散列可以传达到聚集所有已知病毒的云数据库，各种防病毒供应商编目检测恶意软件感染的恶意软件签名，而不需要主机拥有本地或驻留的防病毒代理。此外，可以在网络中监视运行进程和文件系统活动以进一步检测恶意软件感染。此外，网络扫描和网络监控可用于检测可能参与主动僵尸网络或托管僵尸网络内容的主机，并且审核部署在网络中的防病毒策略。

3. 发明授权

US09088606B2 System and method for strategic anti-malware monitoring 有权
标题翻译：战略性反恶意软件监控系统和方法
公开(公告)号：US09088606B2
公开(公告)日：2015-07-21
申请号：US13692200
申请日：2012-12-03
申请人： Tenable Network Security, Inc.
发明人： Marcus J. Ranum , Ron Gula
IPC分类号： H04L29/06
CPC分类号： H04L63/145 , G06F17/30964 , H04L61/1511 , H04L63/1416 , H04L63/1433 , H04L67/02 , H04L67/10
摘要： The system and method described herein may leverage active network scanning and passive network monitoring to provide strategic anti-malware monitoring in a network. In particular, the system and method described herein may remotely connect to managed hosts in a network to compute hashes or other signatures associated with processes running thereon and suspicious files hosted thereon, wherein the hashes may communicated to a cloud database that aggregates all known virus or malware signatures that various anti-virus vendors have catalogued to detect malware infections without requiring the hosts to have a local or resident anti-virus agent. Furthermore, running processes and file system activity may be monitored in the network to further detect malware infections. Additionally, the network scanning and network monitoring may be used to detect hosts that may potentially be participating in an active botnet or hosting botnet content and audit anti-virus strategies deployed in the network.
摘要翻译：本文描述的系统和方法可以利用主动网络扫描和被动网络监控来在网络中提供战略性反恶意软件监视。特别地，本文描述的系统和方法可以远程连接到网络中的被管理的主机以计算与其上运行的进程相关联的哈希或其他签名以及托管在其上的可疑文件，其中散列可以传达到聚集所有已知病毒的云数据库，各种防病毒供应商编目检测恶意软件感染的恶意软件签名，而不需要主机拥有本地或驻留的防病毒代理。此外，可以在网络中监视运行进程和文件系统活动以进一步检测恶意软件感染。此外，网络扫描和网络监控可用于检测可能参与主动僵尸网络或托管僵尸网络内容的主机，并且审核部署在网络中的防病毒策略。

4. 发明申请

US20140013434A1 SYSTEM AND METHOD FOR STRATEGIC ANTI-MALWARE MONITORING 有权
标题翻译：用于战略防恶意监测的系统和方法
公开(公告)号：US20140013434A1
公开(公告)日：2014-01-09
申请号：US13692200
申请日：2012-12-03
申请人： TENABLE NETWORK SECURITY, INC.
发明人： Marcus J. Ranum , Ron Gula
IPC分类号： H04L29/06
CPC分类号： H04L63/145 , G06F17/30964 , H04L61/1511 , H04L63/1416 , H04L63/1433 , H04L67/02 , H04L67/10
摘要： The system and method described herein may leverage active network scanning and passive network monitoring to provide strategic anti-malware monitoring in a network. In particular, the system and method described herein may remotely connect to managed hosts in a network to compute hashes or other signatures associated with processes running thereon and suspicious files hosted thereon, wherein the hashes may communicated to a cloud database that aggregates all known virus or malware signatures that various anti-virus vendors have catalogued to detect malware infections without requiring the hosts to have a local or resident anti-virus agent. Furthermore, running processes and file system activity may be monitored in the network to further detect malware infections. Additionally, the network scanning and network monitoring may be used to detect hosts that may potentially be participating in an active botnet or hosting botnet content and audit anti-virus strategies deployed in the network.
摘要翻译：本文描述的系统和方法可以利用主动网络扫描和被动网络监控来在网络中提供战略性反恶意软件监视。特别地，本文描述的系统和方法可以远程连接到网络中的被管理的主机以计算与其上运行的进程相关联的哈希或其他签名以及托管在其上的可疑文件，其中散列可以传达到聚集所有已知病毒的云数据库，各种防病毒供应商编目检测恶意软件感染的恶意软件签名，而不需要主机拥有本地或驻留的防病毒代理。此外，可以在网络中监视运行进程和文件系统活动以进一步检测恶意软件感染。此外，网络扫描和网络监控可用于检测可能参与主动僵尸网络或托管僵尸网络内容的主机，并且审核部署在网络中的防病毒策略。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式