Finjan, Inc.

Finjan Software, Ltd.

David R Kroll

Yigal Mordechai Edery

Nimrod Itzhak Vered

Shlomo Touboul

Nirmrod Itzhak Vered

A system provides for monitoring information received, determining whether received information does or is likely to include executable code, and if so, causes as sandboxed package including the received information and mobile protection code (MPC) to be transferred to a destination device of the received information. At a destination device, the sandboxed package is unbundled such that upon initiating the Downloadable, malicious Downloadable operating attempts are received by the MPC causing (predetermined) corresponding operations to be executed in response to the attempts.

Malicious mobile code runtime monitoring system and methods

Protection systems and methods provide for protecting one or more personal computers ('PCs') and/or other intermittently or persistently network accessible devices or processes from undesirable or otherwise malicious operations of Java TN applets, ActiveX&#x2122; controls, JavaScript&#x2122; scripts, Visual Basic scripts, add-ins, downloaded/uploaded programs or other 'Downloadables' or &#x201c;mobile code&#x201d; in whole or part. A protection engine embodiment provides for monitoring information received, determining whether received information does or is likely to include executable code, and if so, causes mobile protection code (MPC) to be transferred to and rendered operable within a destination device of the received information. An MPC embodiment further provides, within a Downloadable-destination, for initiating the Downloadable, enabling malicious Downloadable operation attempts to be received by the MPC, and causing (predetermined) corresponding operations to be executed in response to the attempts.

Protection systems and methods provide for protecting one or more personal computers ('PCs') and/or other intermittently or persistently network accessible devices or processes from undesirable or otherwise malicious operations of Java TN applets, ActiveX&#x2122; controls, JavaScript&#x2122; scripts, Visual Basic scripts, add-ins, downloaded/uploaded programs or other 'Downloadables' or &#x201c;mobile code&#x201d; in whole or part. A protection engine embodiment provides, within a server, firewall or other suitable &#x201c;recommunicator,&#x201d; for monitoring information received by the communicator, determining whether received information does or is likely to include executable code, and if so, causes mobile protection code (MPC) to be transferred to and rendered operable within a destination device of the received information, more suitably by forming a protection agent including the MPC, protection policies and a detected-Downloadable. An MPC embodiment further provides, within a Downloadable-destination, for initiating the Downloadable, enabling malicious Downloadable operation attempts to be received by the MPC, and causing (predetermined) corresponding operations to be executed in response to the attempts, more suitably in conjunction with protection policies.

Protection systems and methods provide for protecting one or more personal computers ('PCs') and/or other intermittently or persistently network accessible devices or processes from undesirable or otherwise malicious operations of Java&#x2122; applets, ActiveX&#x2122; controls, JavaScript&#x2122; scripts, Visual Basic scripts, add-ins, downloaded/uploaded programs or other 'Downloadables' or &#x201c;mobile code&#x201d; in whole or part. A protection engine embodiment provides, within a server, firewall or other suitable &#x201c;re-communicator,&#x201d; for monitoring information received by the communicator, determining whether received information does or is likely to include executable code, and if so, causes mobile protection code (MPC) to be transferred to and rendered operable within a destination device of the received information, more suitably by forming a protection agent including the MPC, protection policies and a detected-Downloadable. An MPC embodiment further provides, within a Downloadable-destination, for initiating the Downloadable, enabling malicious Downloadable operation attempts to be received by the MPC, and causing (predetermined) corresponding operations to be executed in response to the attempts, more suitably in conjunction with protection policies.

Growing community of inventors

San Jose, CA, United States of America

David R Kroll