Trend Micro Inc.

First International Computer, Inc.

Che-Fu Yeh

Wen-Kwang Tsao

Hsin-An Hsu

Ming-Hung Chen

Chia-Chi Chang

Peng-Shih Pu

Shih-Han Hsu

Hong-Che Lin

Sheng-Chuan Yen

Tsung-Fu Lin

Pei-Yin Wu

Yu-Min Chang

Jonathan James Oliver

Paul Y Lin

Yi-Li Cheng

Yao-Tang Chang

Cheng-Hsin Hsu

Cheng Hsin Hsu

Yen-Shuo Huang

I-Ting Lien

Ming-Lun Li

Shih-Yu Chou

Po-Yuan Teng

Yuan Jiun Tsui

Rung Chi Chen

Jyh-Ying Peng

Jeng-Yan Shen

A scam detection system includes a user computer that runs a security application and a backend system that runs a scam detector. An email is received at the user computer. The security application extracts and forwards a content of the email, which includes a body of the email, to the backend system. The email body of the email is anonymized by removing personally identifiable information from the email body. A hash of the anonymized email body is generated and compared against hashes of a whitelist and a blacklist. The anonymized email body is classified. A segment of text of the anonymized email body is identified and provided to the user computer when the anonymized email body is classified as scam.

Systems and methods for detecting scam emails

One embodiment disclosed relates to a system for detecting anomalous messaging, discovering compromised accounts, and generating responses to threatened attacks. The system utilizes API commands and log forwarding for interaction and communication between a messaging and account hunting platform, other hunting platforms, an action center, and a security operations center. Another embodiment relates to a method of, and system for, performing a complete root cause analysis. Another embodiment relates to a method of, and system for, anomaly discovery which may advantageously utilize reference data to correlate different anomalies for reporting as a single incident.

Systems and methods for detecting and responding to anomalous messaging and compromised accounts

A smart home includes Internet of things (IOT) devices that are paired with an IOT gateway. A backend system is in communication with the IOT gateway to receive IOT operating data of the IOT devices. The backend system generates a machine learning model for an IOT device. The machine learning model is consulted with IOT operating data of the IOT device to detect anomalous operating behavior of the IOT device. The machine learning model is updated as more and newer IOT operating data of the IOT device are received by the backend system.

Cybersecurity for a smart home

An email attempting to perpetrate a business email compromise (BEC) attack is detected based on similarity of the email to a known BEC email and on similarity of the email to a user email that would have been sent by the purported sender of the email. Metadata of the email is extracted and input to a BEC machine learning model to find the known BEC email among BEC email samples. The extracted metadata are also input to a personal user machine learning model of the purported sender to generate the user email.

Detection of business email compromise attacks

A login page of an online service is received in a user computer. False credentials, such as a false user identifier (ID) and a false password, are entered into the login page to login to the online service. The login page is classified as phishing when the online service does not serve a legitimate login-fail page in response to the entry of the false credentials in the login page.

Login failure sequence for detecting phishing

A system for detecting phishing includes a phishing detection system that generates census of login pages received in different computers of different end users. An end user computer receives a login page and retrieves census information of the login page, such as from the phishing detection system. The census information indicates a number of different end users who employed the login page to log into their respective online accounts. The end user computer reports the census information to the end user of the end user computer. The end user computer reports the census information in numerical, graphical, or other format. The census information of the login page allows the end user to make an informed decision on whether or not to use the login page.

Phishing detection by login page census

Detection of fake antivirus includes classifying text content of a user interface of an application program and scanning files associated with the application program for suspicious code. The user interface may be a graphical user interface (GUI) window of the application program. The text content may be obtained from a painted portion of the GUI window and by intercepting text changing operations performed on the GUI window. The text content may be input to a learning model to determine whether or not the application program belongs to the antivirus category. The application program is deemed to be fake antivirus when the application program is classified as belonging to the antivirus category and has a file with suspicious code.

Detection of fake antivirus in computers

The present invention is to provide a structure for quickly installing and removing an optical disk drive comprising an optical disk drive frame and a main frame, wherein the optical disk drive frame has a vertical wall surface on one side, a side bracket on the other side, a sliding channel disposed adjacent to the side bracket, a latch member disposed on the sliding channel and capable of moving along the sliding channel back and forth, and a push button disposed at the bottom of the latch member. When an optical disk drive is mounted onto the optical disk drive frame, the push button is pushed to move the latch member forward and press against the edge of the optical disk drive, enabling the optical disk drive to be fixed onto the optical disk drive frame.

Structure for quickly installing and removing an optical disk drive

The present invention is to provide a drawer-type computer casing comprising a box and a sliding frame, wherein the box comprises an opening on one side, a connecting section disposed respectively on both corresponding sides of the opening and an accommodating space therein, and the sliding frame can be accommodated in the accommodating space and comprises a latching member movably coupled to an end surface of the box at the position corresponding to the connecting section, such that when the sliding frame is installed in the accommodating space, the latching member will be set precisely on the corresponding position of the connecting section. Therefore, the latching member can be moved into the connecting section to connect the box and the sliding frame together without using screws.

Drawer-type computer casing

The present invention is to provide a mechanism for quickly removing an electronic device from a PC having a smaller case, which comprises a slot in the PC having one or more recesses at either side, enabling a tray installed with the electronic device to be inserted therein through a front opening of the slot and enabling one or more snapping members on either side of the tray to be adapted to snap into one or more recesses on the slot. In an operation of removing the electronic device from the PC, a user may pull a first clinging member of a pivotal gate at the front opening to open a gate upward, and then hold a handle of the tray to quickly pull the tray toward the front opening of the slot.

Growing community of inventors

Taipei, Taiwan

Che-Fu Yeh