International Business Machines Corporation

Trusteer, Ltd.

Gal Frishman

Avner Gideoni

Amit Klein

Elad Menahem

Shaked Vax

Eldan Ben-Haim

Yaron Dycian

Website security may be managed based on known site attributes and placing limits on communication outside a site. One example may include at least one of identifying a site that is currently operating within a first process, comparing the site to known sensitive sites, and responsive to identifying the site as being a known sensitive site, enabling a data traffic limiting operation to limit data traffic in at least one other process apart from the first process.

Managing data traffic in the presence of a sensitive site

System and method for determining, by a security application, whether an examined software code is a malware, according to which the system detects whenever the examined process code performs system calls and further detects a call site. Pieces of code in the surrounding area of the site and/or in branches related to the site are analyzed and the properties of the analyzed pieces of code are compared with a predefined software code patterns, for determining whether the examined process code corresponds to one of the predefined software code patterns. Then the examined process code is classified according to the comparison results.

Method for detecting a malware

A process for identifying potentially harmful malware, comprises the steps of: a) identifying an executable that is about to run; b) providing a monitoring agent that monitors all threads that are descendent of a thread initiated by the process of said executable; and c) configuring said monitoring agent to conclude that a high probability of malware presence exists, if one of said descendent threads reaches a target process in which suspicious patches are created.

Malware discovery method and system

Growing community of inventors

Netanya, Israel

Gal Frishman