专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09342693B2 System and method of monitoring and controlling application files 有权
公开(公告)号：US09342693B2
公开(公告)日：2016-05-17
申请号：US14076940
申请日：2013-11-11
申请人： Websense, Inc.
发明人： Harold M. Kester , Ronald B. Hegli , John Ross Dimm , Mark Richard Anderson
IPC分类号： G06F21/00 , G06F21/56 , G06F21/50 , G06F21/55 , G06F21/57 , G06Q20/20 , H04L29/06
CPC分类号： G06F21/56 , G06F21/50 , G06F21/55 , G06F21/57 , G06F21/6218 , G06Q20/203 , H04L63/0428 , H04L63/20 , Y10S707/99931 , Y10S707/99943 , Y10S707/99945
摘要： A system and method for updating a system that controls files executed on a workstation. The workstation includes a workstation management module configured to detect the launch of an application. A workstation application server receives data associated with the application from the workstation. This data can include a hash value. The application server module can determine one or more categories to associate with the application by referencing an application inventory database or requesting the category from an application database factory. The application database factory can receive applications from multiple application server modules. The application database factory determines whether the application was previously categorized by the application database factory and provides the category to the application server module. Once the application server module has the category, it forwards a hash/policy table to the workstation management module. Upon receipt of the hash/policy table, the workstation management module applies the policy that is associated with the launched application to control access to the application on the workstation.

2. 发明授权

US08938773B2 System and method for adding context to prevent data leakage over a computer network 有权
标题翻译：用于添加上下文以防止计算机网络上的数据泄漏的系统和方法
公开(公告)号：US08938773B2
公开(公告)日：2015-01-20
申请号：US12022838
申请日：2008-01-30
申请人： Daniel Lyle Hubbard
发明人： Daniel Lyle Hubbard
IPC分类号： G06F7/04 , H04L29/06 , H04L12/58
CPC分类号： H04L63/123 , H04L51/12 , H04L63/0245 , H04L63/107
摘要： Systems and methods for adding context to prevent data leakage over a computer network are disclosed. Data is classified and contextual information of the data is determined. A transmission policy is determined in response to the classification and contextual information. The data is either transmitted or blocked in response to the classification and the contextual information.
摘要翻译：公开了用于添加上下文以防止计算机网络上的数据泄漏的系统和方法。对数据进行分类，确定数据的上下文信息。响应于分类和上下文信息来确定传输策略。响应于分类和上下文信息来传送或阻止数据。

3. 发明申请

US20140156838A1 SYSTEM AND METHOD OF MONITORING AND CONTROLLING APPLICATION FILES 有权
标题翻译：监控和控制应用文件的系统和方法
公开(公告)号：US20140156838A1
公开(公告)日：2014-06-05
申请号：US14172803
申请日：2014-02-04
申请人： Websense, Inc.
发明人： Harold M. Kester , Nicole Kaster Jones , John Ross Dimm , Mark Richard Anderson , Joseph Papa
IPC分类号： H04L12/26
CPC分类号： H04L63/20 , G06F11/3476 , G06F17/30864 , G06F21/50 , G06F21/55 , G06F21/57 , G06F2221/2101 , H04L43/00 , H04L43/08 , H04L43/0817 , H04L63/0428 , H04L63/10 , H04L63/102 , H04L63/1408 , H04L63/1416 , H04L67/42 , Y10S707/99943 , Y10S707/99945
摘要： A system and method for updating, monitoring, and controlling applications on a workstation. The workstation includes a workstation management module configured to detect the launch or request to access a network by an application. A workstation application server receives data associated with the application from the workstation. The application server module can determine one or more policies or categories to associate with the application by referencing an application inventory database. Once the application server module has the category or policy, it forwards a hash/policy table to the workstation management module. Upon receipt of the hash/policy table, the workstation management module applies the policy that is associated with the application to control network access by the application.
摘要翻译：用于在工作站上更新，监控和控制应用程序的系统和方法。该工作站包括工作站管理模块，该工作站管理模块被配置为检测由应用程序访问网络的启动或请求。工作站应用程序服务器从工作站接收与应用程序相关联的数据。应用程序服务器模块可以通过引用应用程序库存数据库来确定与应用程序关联的一个或多个策略或类别。一旦应用服务器模块具有类别或策略，它将散列/策略表转发到工作站管理模块。在接收到散列/策略表之后，工作站管理模块应用与应用相关联的策略来控制应用的网络访问。

4. 发明申请

US20140155028A1 METHOD AND APARATUS FOR MANAGING THE TRANSFER OF SENSITIVE INFORMATION TO MOBILE DEVICES 有权
标题翻译：用于管理向移动设备传输敏感信息的方法和方法
公开(公告)号：US20140155028A1
公开(公告)日：2014-06-05
申请号：US13691544
申请日：2012-11-30
申请人： WEBSENSE, INC.
发明人： Ramon Daniela , Mark Ostrer , Michael Stoler
IPC分类号： H04W12/02
CPC分类号： H04L51/34 , H04L51/12 , H04L51/38 , H04L63/0227 , H04W12/02 , H04W12/12
摘要： Methods and apparatus provide data loss protection for mobile devices. In one aspect, data is analyzed by a data loss protection server to determine if it is authorized by data loss protection policies to be transferred to a mobile device. The time necessary to analyze the data may exceed a mobile device timeout value. To prevent the mobile device from timing out, the DLP server may send one or more portions of a response to the mobile device at a time interval less than the mobile device timeout value. Some portions of the response may be sent before the analyzing of the data is completed.
摘要翻译：方法和设备为移动设备提供数据丢失保护。在一个方面，由数据丢失保护服务器分析数据，以确定是否将数据丢失保护策略授权给移动设备。分析数据所需的时间可能超过移动设备超时值。为了防止移动设备超时，DLP服务器可以以小于移动设备超时值的时间间隔向移动设备发送响应的一个或多个部分。在分析数据完成之前可以发送响应的一些部分。

5. 发明授权

US08645340B2 System and method of monitoring and controlling application files 有权
标题翻译：监控应用文件的系统和方法
公开(公告)号：US08645340B2
公开(公告)日：2014-02-04
申请号：US13437885
申请日：2012-04-02
申请人： John Ross Dimm , Mark Richard Anderson , Joseph Papa , Nicole Kester Jones
发明人： Harold M. Kester , John Ross Dimm , Mark Richard Anderson , Joseph Papa
IPC分类号： G06F17/00
CPC分类号： H04L63/20 , G06F11/3476 , G06F17/30864 , G06F21/50 , G06F21/55 , G06F21/57 , G06F2221/2101 , H04L43/00 , H04L43/08 , H04L43/0817 , H04L63/0428 , H04L63/10 , H04L63/102 , H04L63/1408 , H04L63/1416 , H04L67/42 , Y10S707/99943 , Y10S707/99945
摘要： A system and method for updating, monitoring, and controlling applications on a workstation. The workstation includes a workstation management module configured to detect the launch or request to access a network by an application. A workstation application server receives data associated with the application from the workstation. The application server module can determine one or more policies or categories to associate with the application by referencing an application inventory database. Once the application server module has the category or policy, it forwards a hash/policy table to the workstation management module. Upon receipt of the hash/policy table, the workstation management module applies the policy that is associated with the application to control network access by the application.
摘要翻译：用于在工作站上更新，监控和控制应用程序的系统和方法。该工作站包括工作站管理模块，该工作站管理模块被配置为检测由应用程序访问网络的启动或请求。工作站应用程序服务器从工作站接收与应用程序相关联的数据。应用程序服务器模块可以通过引用应用程序库存数据库来确定与应用程序关联的一个或多个策略或类别。一旦应用服务器模块具有类别或策略，它将散列/策略表转发到工作站管理模块。在接收到散列/策略表之后，工作站管理模块应用与应用相关联的策略来控制应用的网络访问。

6. 发明授权

US08453243B2 Real time lockdown 有权
公开(公告)号：US08453243B2
公开(公告)日：2013-05-28
申请号：US11319678
申请日：2005-12-28
申请人： Rajesh Kumar Sharma , Winping Lo , Joseph Papa
发明人： Rajesh Kumar Sharma , Winping Lo , Joseph Papa
IPC分类号： H04L29/06
CPC分类号： G06F21/51 , G06F21/54 , G06F21/554 , G06F21/56 , G06F21/60
摘要： A system and method that trusts software executables existent on a machine prior to activation for different types of accesses e.g. execution, network, and registry. The system detects new executables added to the machine as well as previously existent executables that have been modified, moved, renamed or deleted. In certain embodiments, the system will tag the file with a flag as modified or newly added. Once tagged, the system intercepts particular types of file accesses for execution, network or registry. The system determines if the file performing the access is flagged and may apply one or more policies based on the requested access. In certain embodiments, the system intercepts I/O operations by file systems or file system volumes and flags metadata associated with the file. For example, the NT File System and its extended attributes and alternate streams may be utilized to implement the system.

7. 发明申请

US20120222116A1 SYSTEM AND METHOD FOR DETECTING WEB BROWSER ATTACKS 审中-公开
标题翻译：用于检测网络浏览器攻击的系统和方法
公开(公告)号：US20120222116A1
公开(公告)日：2012-08-30
申请号：US13035832
申请日：2011-02-25
申请人： Stephan Chenette
发明人： Stephan Chenette
IPC分类号： G06F21/00 , G06F15/16 , G06F11/30
CPC分类号： G06F21/566 , G06F21/54 , G06F21/554 , G06F2221/2119 , H04L63/1416 , H04L63/168
摘要： A method and system for detecting a heap corruption exploit of a web browser is described. The method comprises installing or injecting a detection module into the web browser. Next, the detection module patches or hooks all calls to the detection module in order to identify calls indicating a heap corruption exploit. The identified calls are then analyzed to determine whether a heap corruption exploit is occurring.
摘要翻译：描述了用于检测web浏览器的堆损坏利用的方法和系统。该方法包括将检测模块安装或注入到网络浏览器中。接下来，检测模块对所有检测模块的调用进行补丁或挂钩，以便识别表示堆损坏利用的调用。然后分析识别的调用以确定是否发生堆损坏利用。

8. 发明授权

US08020209B2 System and method of monitoring and controlling application files 有权
标题翻译：监控应用文件的系统和方法
公开(公告)号：US08020209B2
公开(公告)日：2011-09-13
申请号：US11143006
申请日：2005-06-01
申请人： Harold M. Kester , Ronald B. Hegli , John Ross Dimm , Mark Richard Anderson
发明人： Harold M. Kester , Ronald B. Hegli , John Ross Dimm , Mark Richard Anderson
IPC分类号： G06F12/14
CPC分类号： G06F21/56 , G06F21/50 , G06F21/55 , G06F21/57 , G06F21/6218 , G06Q20/203 , H04L63/0428 , H04L63/20 , Y10S707/99931 , Y10S707/99943 , Y10S707/99945
摘要： A system and method for updating a system that controls files executed on a workstation. The workstation includes a workstation management module configured to detect the launch of an application. A workstation application server receives data associated with the application from the workstation. This data can include a hash value. The application server module can determine one or more categories to associate with the application by referencing an application inventory database or requesting the category from an application database factory. The application database factory can receive applications from multiple application server modules. The application database factory determines whether the application was previously categorized by the application database factory and provides the category to the application server module. Once the application server module has the category, it forwards a hash/policy table to the workstation management module. Upon receipt of the hash/policy table, the workstation management module applies the policy that is associated with the launched application to control access to the application on the workstation.
摘要翻译：一种用于更新控制在工作站上执行的文件的系统的系统和方法。工作站包括被配置为检测应用的启动的工作站管理模块。工作站应用程序服务器从工作站接收与应用程序相关联的数据。该数据可以包括哈希值。应用服务器模块可以通过引用应用库存数据库或从应用数据库工厂请求类别来确定与应用相关联的一个或多个类别。应用程序数据库工厂可以从多个应用程序服务器模块接收应用程序。应用程序数据库工厂确定应用程序是否以前由应用程序数据库工厂分类，并将类别提供给应用程序服务器模块。一旦应用程序服务器模块有类别，它将一个散列/策略表转发给工作站管理模块。在接收到散列/策略表之后，工作站管理模块应用与所启动的应用相关联的策略来控制对工作站上的应用的访问。

9. 发明申请

US20090241173A1 METHOD AND SYSTEM FOR PROTECTION AGAINST INFORMATION STEALING SOFTWARE 有权
公开(公告)号：US20090241173A1
公开(公告)日：2009-09-24
申请号：US12051616
申请日：2008-03-19
申请人： Lidror Troyansky
发明人： Lidror Troyansky
IPC分类号： G06F21/00
CPC分类号： H04L63/083 , G06F21/552 , G06F21/566 , G06F21/6218 , H04L63/04 , H04L63/1425 , H04L63/1441 , H04L63/1483
摘要： A system and method for identifying infection of unwanted software on an electronic device is disclosed. A software agent configured to generate a bait and is installed on the electronic device. The bait can simulate a situation in which the user performs a login session and submits personal information or it may just contain artificial sensitive information. Parameters may be inserted into the bait such as the identity of the electronic device that the bait is installed upon. The output of the electronic device is monitored and analyzed for attempts of transmitting the bait. The output is analyzed by correlating the output with the bait and can be done by comparing information about the bait with the traffic over a computer network in order to decide about the existence and the location of unwanted software. Furthermore, it is possible to store information about the bait in a database and then compare information about a user with the information in the database in order to determine if the electronic device that transmitted the bait contains unwanted software.

10. 再颁专利

USRE40187E1 Method and apparatus for managing internetwork and intranetwork activity 有权
标题翻译：用于管理互联网络和内部网络活动的方法和装置
公开(公告)号：USRE40187E1
公开(公告)日：2008-03-25
申请号：US10918833
申请日：2004-08-12
申请人： Dalen M. Abraham , Todd A. Barnes , Paul F. Bouche , Thomas P. Bougetz , Tracy A. Gosselin , Mark G. Grieve , Brent A. Langdon , Robert C. Allison , Michael S. Nikkel , Stuart Rosove
发明人： Dalen M. Abraham , Todd A. Barnes , Paul F. Bouche , Thomas P. Bougetz , Tracy A. Gosselin , Mark G. Grieve , Brent A. Langdon , Robert C. Allison , Michael S. Nikkel , Stuart Rosove
IPC分类号： H04L29/06 , G06F21/20 , G06F13/00 , G06F17/00
CPC分类号： H04L41/28 , H04L29/06 , H04L29/12047 , H04L41/046 , H04L41/22 , H04L41/26 , H04L61/15 , H04L63/0227 , H04L63/0263
摘要： In accordance with the present invention, a network management program (80) is provided that manages the communication of data packets between an intranetwork (44) and an internetwork (40). An operator of a computer connected to the intranetwork (44) inputs vital information regarding users of computers connected to the intranetwork (44), mapping information regarding computers connected to the intranetwork (44), and policies to be applied against those users and computers, using a graphical user interface (GUI 70). The GUI (70) communicates the vital user information, mapping information and policies to a database (72) which stores and organizes the vital user information, mapping information and policies. A filter executive (76) optimizes the policies stored in the database (72) into a set of rules for each user and passes the rules to a filter engine (78). The filter engine (78) filters all outbound data packets transmitted from the intranetwork (44) to the internetwork (40) and verifies all inbound data packets from the internetwork (40) according to the rules provided by the filter executive (76). The filter executive (76) also communicates the mapping information stored in the database (72) to a naming service manager (74) which further updates the mapping information and returns the updated mapping information to the filter executive (76). Consequently, the filter executive (78) filters the data packets according to the most recent mapping information.
摘要翻译：根据本发明，提供一种网络管理程序（80），其管理内网（44）和互联网络（40）之间的数据分组的通信。连接到内网（44）的计算机的操作者输入关于连接到内网（44）的计算机的用户的重要信息，关于连接到内部网络（44）的计算机的映射信息，以及针对这些用户和计算机应用的策略，使用图形用户界面（GUI 70）。 GUI（70）将重要用户信息，映射信息和策略传送到存储和组织重要用户信息，映射信息和策略的数据库（72）。过滤器执行程序（76）将存储在数据库（72）中的策略优化为每个用户的一组规则，并将规则传递给过滤器引擎（78）。滤波器引擎（78）将从网络内传输的所有出站数据分组（44）过滤到互联网络（40），并且根据由过滤器执行程序（76）提供的规则来验证来自互联网络（40）的所有入站数据分组。过滤器执行器（76）还将存储在数据库（72）中的映射信息传送到命名服务管理器（74），命名服务管理器（74）进一步更新映射信息，并将更新后的映射信息返回给过滤执行器（76）。因此，过滤器执行器（78）根据最近的映射信息对数据分组进行过滤。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式