Symantec Corporation

Anand Bodke

Abhijit V Limaye

Prabhat Kumar Singh

Sujit Magar

Method, apparatus, and computer readable medium for detecting malware on a target computer system is described. A threat profile is obtained at the target computer, the threat profile having manifestation information for known malware, the manifestation information including effects of the known malware on computer systems infected by the known malware. Using the threat profile, at least a portion of the manifestation information is detected on the target computer. A confidence level for detection of potential malware is determined based on the at least a portion of the manifestation information detected. The potential malware on the target computer is convicted as malware for remediation if the confidence level satisfies a threshold confidence level.

Method and apparatus for detecting malware on a computer system

A computer-implemented method for data loss prevention may include 1) identifying a network configured with a data loss prevention system including at least one data loss prevention policy directed to textual data expressed in a primary natural language, 2) identifying a textual object subject to a data loss prevention assessment within the network, 3) determining that the textual object includes a textual component that is not expressed in the primary natural language, 4) in response to determining that the textual object includes the textual component, translating the textual component from a secondary natural language that the data loss prevention policy does not recognize into the primary natural language that the data loss prevention policy does recognize, and 5) after translating the textual component into the primary natural language, applying the data loss prevention policy to a modified textual object including the translated textual component. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for data loss prevention in bilingual text messages with a data loss policy which recognizes only one primary language

A computer-implemented method for detecting malware on mobile platforms may include (1) identifying an application on a mobile computing platform subject to a malware evaluation, (2) transmitting the application to a security server, (3) providing emulation information to the security server, the emulation information relating to emulating the mobile computing platform, (4) receiving a result of the malware evaluation as performed by the security server, the malware evaluation including the security server using the emulation information to execute the application within an emulation of the mobile computing platform, and (5) performing a security action based on the result of the malware evaluation. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for detecting malware on mobile platforms

A computer-implemented method for identifying polymorphic malware may include identifying a sample of a variant within a polymorphic malware strain. The computer-implemented method may also include identifying a set of filters for identifying the polymorphic malware strain. The computer-implemented method may further include determining that the set of filters incorrectly excludes the sample from being identified as within the polymorphic malware strain. The computer-implemented method may additionally include modifying the set of filters to not exclude the sample from being identified as within the polymorphic malware strain. Various other methods, systems, and computer-readable media are also disclosed.

Growing community of inventors

Pune, India

Anand Bodke