Mcafee, Inc.

Ntt Docomo, Inc.

Networks Associates Technology, Inc.

Davide Libenzi

Victor Kouznetsov

Michael C Pak

Martin Fallenstedt

David W Palmer

Kenji Ishii

Yasutaka Urakawa

Kensaku Mori

Koichi Asano

Akira Ogata

Michael Chin-Hwan Pak

Katsuaki Yoshizawa

Yasutaka Urakama

Masanori B314 Heights Noukenndai 1-35-2 Fujita

A system, method, and computer program product are provided for initiating a security action at an intermediate layer coupled between a library and an application. In use, a library of data is stored. Additionally, system calls intended for operating on the data are produced, utilizing an application. Furthermore, the system calls are intercepted and a security action is initiated on the data in response to the interception, utilizing an intermediate layer between the library and the application.

System, method, and computer program product for initiating a security action at an intermediate layer coupled between a library and an application

A system, method and computer program product are provided for securely generating signatures. Initially received is a request to generate a signature at a secure server. Then, the signature is automatically generated at the secure server utilizing a private key stored at the secure server. The signature is then transmitted from the secure server. Such signature is capable of being used to verify an authenticity of an update (i.e. data and/or software) for a computer utilizing a public key.

Secure signature server system and associated method

A system, method and computer program product are provided for scanning a mobile wireless device for malware. Initially, a service agent is initiated utilizing a mobile wireless device. Next, information describing the mobile wireless device is transmitted to a back-end server over a wireless network utilizing the service agent of the mobile wireless device. An update is then received from the back-end server over the wireless network utilizing the service agent of the mobile wireless device. Subsequently, an anti-malware scanner installed on the mobile wireless device is updated so that the mobile wireless device may be scanned utilizing the updated anti-malware scanner.

Malware scanning wireless service agent system and method

A system, method and computer program product are provided for scanning a mobile wireless device for malware. Initially, an update command is received from a user utilizing a graphical user interface of a mobile wireless device. An anti-malware scanner installed on the mobile wireless device is then updated over a wireless network in response to the update command. The mobile wireless device is then scanned utilizing the updated anti-malware scanner. Such anti-malware scanner may be conditionally updated based on the update command so as to regulate usage of the wireless network with the mobile wireless device.

Malware scanning user interface for wireless devices

A system, method and computer program product are provided for scanning a mobile wireless device for malware. A scan command is initially received from a user utilizing a mobile wireless device. Further, a component manager of the mobile wireless device is instantiated in response to the scan command. An anti-malware scanner is then executed utilizing the component manager. Further, the mobile wireless device is scanned utilizing the anti-malware scanner.

Wireless architecture with malware scanning component manager and associated API

A system and method includes passive screening of transient messages in a distributed computing environment. A transient packet stream is passively monitored at a network boundary. Incoming datagrams structured in compliance with a network protocol layer are received. One or more of the incoming datagrams are reassembled into a segment structured in compliance with a transport protocol layer. Contents of the reassembled segment are scanned for a presence of at least one of a computer virus and malware to identify infected message contents.

System and method for providing passive screening of transient messages in a distributed computing environment

A system, method and computer program product are provided for categorizing data. In use, features are extracted from binary data. Such extracted features are compared with a predetermined set of features. Based, at least in part, on the comparison, the binary data is categorized.

Binary data categorization engine and database

A system, method and computer program product are provided for accessing security or content analysis functionality utilizing a mobile communication device. Included is an operating system installed on a mobile communication device capable of communicating via a wireless network. Further provided is an application program installed on the mobile communication device and executed utilizing the operating system for performing tasks. A scanning subsystem remains in communication with the application program via an application program interface. Such scanning subsystem is adapted for accessing security or content analysis functionality in conjunction with the tasks performed by the application program.

API system, method and computer program product for accessing content/security analysis functionality in a mobile communication framework

A system, method and computer program product are provided for efficiently updating a scanning subsystem of a mobile communication device. Initially received is a first portion of an update adapted for updating a scanning subsystem of a mobile communication device. Further, more portions of the update are received in addition to the receipt of the first portion of the update. The update is then installed with the scanning subsystem.

Update system and method for updating a scanning subsystem in a mobile communication framework

A system, method and computer program product are provided for scanning a plurality of mobile wireless devices for malware. A request is received to update an anti-malware scanner installed on a mobile wireless device over a wireless network. Further, an update tailored for the mobile wireless device is prepared using a back-end infrastructure. Such tailored update is then transmitted from the back-end infrastructure to the mobile wireless device over the wireless network.

Wireless malware scanning back-end system and method

A system and method for providing dynamic screening of transient messages in a distributed computing environment is disclosed. An incoming message is intercepted at a network domain boundary. The incoming message includes a header having a plurality of address fields, each storing contents. A set of blocking rules is maintained. Each blocking rule defines readily-discoverable characteristics indicative of messages infected with at least one of a computer virus, malware and bad content. The contents of each address field are identified and checked against the blocking rules to screen infected messages and identify clean messages. Each such clean message is staged into an intermediate message queue pending further processing.

System and method for providing dynamic screening of transient messages in a distributed computing environment

A system, method and computer program product are provided for scanning a mobile wireless device for malware. Initially, a platform abstraction layer of a mobile wireless device is called. Further, an anti-malware scanner-related function module on the mobile wireless device is initiated utilizing the platform abstraction layer. Such platform abstraction layer enables the anti-malware scanner-related function module to be initiated on any of a plurality of different mobile wireless devices.

Platform abstraction layer for a wireless malware scanning engine

A system, method and computer program product are provided for scanning a mobile wireless device for malware. Initially, an application service provider is initiated utilizing a mobile wireless device. Next, an anti-malware scanner installed on the mobile wireless device is updated over a wireless network utilizing the application service provider. The mobile wireless device is then scanned utilizing the updated anti-malware scanner.

System, method and computer program product for equipping wireless devices with malware scanning capabilities

A system and method for performing efficient computer virus scanning of transient messages using checksums in a distributed computing environment is described. An incoming message is intercepted at a network domain boundary. The incoming message includes a body storing message content. The message content is parsed from the body and a checksum is calculated over the parsed message content. The checksum is stored in an information file associated with the incoming message in a transient message store. The incoming message is scanned for a presence of at least one of a computer virus and malware to identify infected message contents. The checksum corresponding to each infected message content and an infection indicator is recorded.

System and method for performing efficient computer virus scanning of transient messages using checksums in a distributed computing environment

A system, method and computer program product are provided for scanning application program data utilizing a mobile communication device. Included is an application program installed on a mobile communication device capable of communicating via a wireless network. Such application program is adapted for performing tasks utilizing the mobile communication device. Associated therewith is a scanning subsystem in communication with the application program for scanning application data relating to the tasks performed by the application program. In use, the application program communicates information relating to the application data to the scanning subsystem to facilitate the scanning by the scanning subsystem.

Growing community of inventors

Hillsboro, OR, United States of America

Davide Libenzi