Symantec Corporation

Apple Inc.

Dirk Kessler

Kevin T Rowney

Bruce Christopher Wootton

Eric Bothwell

Michael R Wolfe

Chris Jones

Hai Chen

Rajesh Upadhyay

Lee McIntyre

Richard Bruce Dandliker

Timothy Micheal Wyatt

Sarin Sumit Manmohan

Phillip DiCorpo

Milind Torney

Aleksey Tsibulya

Ian Barile

Oskar Bruening

Shree Raman

Shun Chen

Mario Espinoza

Pushkar Tiwari

Rohit Surve

The sources of emails sent from mobile devices using wireless email protocols can be identified. In one embodiment, the invention includes receiving a simple mail transfer protocol (SMTP)-formatted email sent from a mobile device as an HTTP request. An SMTP-compliant header identifying the mobile device is examined, that was inserted into the HTTP request using information contained in one or more HTTP headers of the HTTP request. Then, an email data loss prevention (DLP) policy specific to mobile devices is applied to the received email.

Source mobile device identification for data loss prevention for electronic mail

A computer-implemented method for configuring computing systems may include (1) detecting an event associated with a client device that potentially impacts a group to which the client device is assigned and, in response to detecting the event, (2) discovering at least one attribute of the client device that has the potential to impact the client device's group assignment, (3) identifying at least one rule that defines conditions for assigning client devices to groups, (4) determining, by applying the rule to the discovered attribute of the client device, that the client device's group assignment should be modified, and (5) modifying, in response to determining that the client device's group assignment should be modified, the client device's group assignment based on the discovered attribute of the client device. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for dynamically configuring computing system group assignments based on detected events

A mobile device identifies a secure document that contains one or more context rules that correspond to the secure document. The mobile device determines whether a user is authorized to access the secure document based on the one or more context rules. The mobile device identifies an original document format for the secure document if the user is authorized to access the secure document and identifies an authorized application installed on the mobile device for accessing the secure document using the original document format. The authorized application corresponds to the original document format of the secure document. The mobile device sends the secure document to the authorized application.

Preventing the loss of sensitive data synchronized with a mobile device

A method and apparatus for identity consolidation for a plurality of electronic identities is described. In one embodiment, the method includes receiving user identification data extracted from an electronic communication, the user identification data corresponding to an unknown identity of a sender of the electronic communication. The method further includes determining a known identity for the sender using the user identification data extracted from the electronic communication and associating the known identity with the unknown identity of the sender of the electronic communication. In one embodiment, an association between the known identity and the unknown identity is maintained to determine whether parties of subsequent information transfers are authorized to participate in the information transfers.

System and method for identity consolidation

A method and apparatus for classifying behavior of an application based on its data access pattern is described. In one embodiment, the method includes monitoring file access events associated with an application, and determining whether at least one of the file access events indicates the application's attempt to manipulate data of a file. If at least one file access event indicates the application's attempt to manipulate the data within the file, then at least one action is caused to be performed.

Data loss protection through application data access classification

A method and apparatus for managing data loss due to policy violations in temporary files is described. In one embodiment, the method includes monitoring, by a client agent, information content on a client for violations of a policy. The method further includes determining, by the client agent, that a violation of the policy has occurred for content of a temporary file of an application. In one embodiment, the policy violation of the temporary file is correlated, by the client agent, with an original file of the application.

System and method for managing data loss due to policy violations in temporary files

A method and apparatus for defining the scope of a search is described. In one embodiment, user input is received, and the scope is defined, based on the user input, for a search of free-form text for information from any random rows within a tabular structure of source data. In one embodiment, the search is intended for finding, in the free-form text, a sub-set of data fragments that matches information from any single row within the tabular structure of the source data.

Method and apparatus to define the scope of a search for information from a tabular data source

A computer-implemented method for normalizing data-loss-prevention categorization information, at least a portion of the method being performed by a computing system comprising at least one processor, may identify a data object at a first time. The method may apply a first version of a set of data-loss-prevention rules to the data object to determine a set of categorizations of the data object. The method may distinguish a set of content-based categorizations in the set of categorizations from a set of context-based categorizations in the set of categorizations. The method may apply, based on the set of categorizations, a first data-loss-prevention policy to the data object. The method may identify the data object at a second time, and apply, based on the set of content-based categorizations, a second data-loss-prevention policy to the data object. Various other methods, systems, and computer-readable media are also disclosed.

Methods and systems for normalizing data loss prevention categorization information

Techniques for providing access to databases from handheld devices are disclosed. Techniques can be used to implement a database system. The database system provides a graphical user interface which can be displayed on handheld devices. This allows users of handheld devices to conveniently by interacting with the graphical user interface. As will be appreciated, the user can access the database to perform a variety of operations. Moreover, the user can perform these operations without having to write programs and virtually in real time. Thus, the user can conveniently access the database and be provided with up-to-date information. In addition, the user can be provided with hyperlinks which allow the user to conveniently perform various tasks without having to switch between different operation modes.

Growing community of inventors

San Francisco, CA, United States of America

Dirk Kessler