Symantec Corporation

Lookout, Inc.

Nextracker Inc.

Bruce Christopher Wootton

Timothy Micheal Wyatt

Kevin Patrick Mahaffey

Brian James Buck

David Luke Richardson

James David Burgess

John Gunther Hering

William Neil Robinson

Francesco Borrelli

David Golombek

Daniel Lee Evans

Anthony McKay Lineberry

Allan Daly

Kyle Barton

Jonathan Grubb

Rory Joseph Timar

Colin Patrick Murphy

Ariel Salomon

Dirk Kessler

Timothy Strazzere

Yogesh Swami

Aleksey Tsibulya

Hai Chen

John Gerald Ferguson

Shree Raman

Richard Bruce Dandliker

Kuldeep Sureshrao Nagarkar

Thomas G Clifford

Hasan Alkhatib

Phillip DiCorpo

Gaurav Malhotra

Ian Barile

Oskar Bruening

Rajesh Upadhyay

Shun Chen

Timothy Michael Wyatt

Fouad Tobagi

A testing platform tests an electrical and mechanical system such as an HVAC unit according to an algorithm that reduces the total testing time of the components of the system, while ensuring the safety of the system during system-wide testing. The platform uses constraints that are checked both before and during the testing to ensure that HVAC operating conditions are acceptable for starting and maintaining component tests. Preferably, the platform uses finite-state machines for each device to organize the component tests, allowing for monitoring of constraints and starting, pausing, and stopping component tests. Preferably, total test execution time is reduced by running component tests in parallel, running component tests based on loads of the components, or combinations of both.

Systems for and methods of automatically scheduling and executing in situ tests on electrical and mechanical systems

Methods and systems are provided for conditionally granting access to service levels based on a determined security state of the device requesting access. A software component, upon receiving a request for access to a provider having a plurality of service levels, determines the current security state of the requesting device. The software component compares that security state to a policy associated with the provider. The software component then allows the requesting device access to the provider services where the device's current security state meets or exceeds the security state required for the service.

Methods and systems for conditionally granting access to services based on the security state of the device requesting access

Methods and systems are provided for sharing information and improving the functioning of devices by blocking potentially harmful communications. In the methods and systems disclosed, a security component on an electronic device may receive a policy. The security component may also receive, from a local device proxy on the electronic device, information pertaining to a communication. The security component may compare the information pertaining to the communication to the policy. The comparison may result in a determination that the communication is potentially harmful. The security component may then instruct the local device proxy to block the communication from proceeding past the local device proxy.

Methods and systems for blocking potentially harmful communications to improve the functioning of an electronic device

Methods are provided for determining an enterprise risk level, for sharing security risk information between enterprises by identifying a security response by a first enterprise and then sharing the security response to a second enterprise when a relationship database profile for the first collection indicates the security response may be shared. Methods are also provided for determining whether to allow a request from an originating device where the request may have been initiated by a remote device.

Methods and systems for sharing risk responses between collections of mobile communications devices

Methods and systems are provided for sharing security risk information between collections of computing devices, such as mobile communications devices, to improve the functioning of devices associated with the collections. The methods and systems disclosed may share security risk information by identifying a security risk response by a first collection and then providing the security risk response to a second collection when a relationship database profile for the first collection indicates the security response may be shared with the second collection. Methods and systems are also provided for determining whether to allow a request from an originating device where the request may have been initiated by a remote device.

Methods and systems for sharing risk responses to improve the functioning of mobile communications devices

Application programs for mobile communication devices are stored in a data store. The applications may be collected from any number of different sources such as through an application programming interface (API), from web crawling, from users, or combinations of these. The applications are analyzed and the analysis results reported. The applications may be 'continuously' analyzed so that any changes in assessments can be reported. If an application for which an analysis is sought is not in the data store, information about a different, but related application may be provided.

System and method for a scanning API

A method and apparatus for selectively removing a data element that triggers a policy violation from a web request to an interactive website. In one method, the method identifies a policy for protecting source data, having a plurality of data elements. The method further evaluates a web request sent to an interactive website as part of a web-based application, and determines that the web request includes at least one data element triggering a violation of the policy. The method determines the data boundaries of the web request, and selectively removes data content within the data boundaries containing the at least one data element that triggered the violation to allow the web request to be processed by the interactive website as if it were the original web request containing the at least one data element.

Selective removal of protected content from web requests sent to an interactive website

A method and apparatus for identity consolidation for a plurality of electronic identities is described. In one embodiment, the method includes receiving user identification data extracted from an electronic communication, the user identification data corresponding to an unknown identity of a sender of the electronic communication. The method further includes determining a known identity for the sender using the user identification data extracted from the electronic communication and associating the known identity with the unknown identity of the sender of the electronic communication. In one embodiment, an association between the known identity and the unknown identity is maintained to determine whether parties of subsequent information transfers are authorized to participate in the information transfers.

System and method for identity consolidation

A method and apparatus for remediating backup data to control access to sensitive data is described. In one embodiment, the method for facilitating sensitive data remediation from backup images without a separate data store includes examining the backup images to identify sensitive data and modifying remediation information associated with the sensitive data, wherein the remediation information restricts access to the sensitive data to at least one corresponding access group.

Method and apparatus for remediating backup data to control access to sensitive data

A method and apparatus for selectively removing a data element that triggers a policy violation from a web request to an interactive website. In one embodiment, a computer-implemented method identifies a policy for protecting source data, having a plurality of data elements. The method further evaluates a web request sent to an interactive website as part of a web-based application, and determines that the web request includes at least one of the plurality of data elements triggering a violation of the policy. The method determines the data boundaries of the web request, and selectively removes data content within the data boundaries containing the at least one data element that triggered the violation to allow the web request to be processed by the interactive website as if it were the original web request containing the at least one data element.

A method and apparatus for classifying behavior of an application based on its data access pattern is described. In one embodiment, the method includes monitoring file access events associated with an application, and determining whether at least one of the file access events indicates the application's attempt to manipulate data of a file. If at least one file access event indicates the application's attempt to manipulate the data within the file, then at least one action is caused to be performed.

Data loss protection through application data access classification

A computer-implemented method for normalizing data-loss-prevention categorization information, at least a portion of the method being performed by a computing system comprising at least one processor, may identify a data object at a first time. The method may apply a first version of a set of data-loss-prevention rules to the data object to determine a set of categorizations of the data object. The method may distinguish a set of content-based categorizations in the set of categorizations from a set of context-based categorizations in the set of categorizations. The method may apply, based on the set of categorizations, a first data-loss-prevention policy to the data object. The method may identify the data object at a second time, and apply, based on the set of content-based categorizations, a second data-loss-prevention policy to the data object. Various other methods, systems, and computer-readable media are also disclosed.

Methods and systems for normalizing data loss prevention categorization information

Growing community of inventors

Alameda, CA, United States of America

Bruce Christopher Wootton