Hewlett-packard Development Company, L.p.

Avg Technologies Cy Limited

Other

Avg Technologies N.v.

Palantir Technologies Inc.

Matthew Williamson

Mark Elliot

Vladimir Gorelik

Andrew Patrick Norman

Jonathan Griffin

Divyanshu Arora

Steven Austin

Christopher L Dalton

Jason Hoch

Greg Dearment

Robert Kruszewski

Various embodiments for detecting harmful software are disclosed.

Method and apparatus for detecting harmful software

Embodiments of the invention address the problem of removing malicious code from infected computers.

Method and apparatus for removing harmful software

One embodiment of an apparatus for monitoring from a first location in a computer network traffic emanating from a source at a second location in the network, the apparatus comprising means at the first location for detecting traffic emanating from the source and means for monitoring the number, per unit time, of distinct destinations of the traffic that lie outside a first set specifying familiar destinations of the traffic. This monitoring process can trigger various responses such as the isolation of the source from the network. Other systems and methods are also provided.

Methods of, and apparatus for, monitoring traffic emanating from a source in a network

Systems and methods for protecting from harmful software on a computer are disclosed. The systems and methods may include observing potentially harmful software on the computer at runtime, determining that at least part of the potentially harmful software is harmful software and removing effects of the harmful software from the computer based on at least the observing and the determining, despite attempts by the harmful software to resist the removing.

A method of operating a computing entity in a network having a log mapping computing entity network addresses to vulnerabilities, the method comprising the steps of: using the entity's network address, searching the log to establish what vulnerabilities the entity has; and if the log indicates the entity has a vulnerability, sending data identifying a user of the entity to an administrator of the network.

Network management

Access to a data processor is controlled by determining if a requested function command conforms to a set of parameters, the set of parameters being derived from previously executed function commands. If the requested function command does not conform to the set of parameters the data processor is controlled to temporarily hold the execution of the requested function commands.

Resumption of execution of a requested function command

A method and apparatus for controlling communications in a data network comprises detecting a request to initiate communication between a data processor and the network and determining if the communication request is abnormal and if so, controlling the data processor to degrade the resulting communication.

Growing community of inventors

Palo Alto, CA, United States of America

Matthew Williamson