Bank of America Corporation

Mian Zhou

William Scott Treadwell

Sean Catlett

Daniel P Shnowske

Rhonna Clark

Timothy Byrd

Helen Sarris

Chuan Bin Lin

An enhanced whitelisting module associated within a system whitelists unknown files for execution on the system. The whitelisting module may oversee the computation of a hash of a file loaded into the memory and comparison of the hash to hashes within a hash table generated from clean files located on a clean system. The whitelisting module may communicate to a device internal and/or external to the system to retrieve the hash table of clean files. In certain embodiments, a rolling hash (or other piecewise hash) may be used to determine the location and/or extent of the differences between a modified file and a clean file.

Memory whitelisting

A system and method for analyzing Intrusion Detection System (IDS) alert data associated with a computer network is described. The method includes applying first association rules to obtained IDS alert data associated with a computer network and processing the obtained IDS alert data with the first association rules. Analyst feedback data associated with the processed obtained IDS alert data is received, and a training data set from the analyst feedback data is received. New association rules are determined based upon the training data set, and the new association rules are outputted to a display of a computing device. Outputting the new association rules may include outputting patterns within the IDS alert data of false positive alerts. The new association rules may be applied back to the obtained IDS alert data.

Intrusion detection system alerts mechanism

A method suitable for detecting malicious files includes several steps. A file that is received into a computer system is analyzed to determine a presence or absence of each of a plurality of predefined properties in the file. A score is calculated based on the presence or absence of the plurality of properties in the file. This score is reflective of the risk that the file is malicious. Once the score is calculated, the file can be further processed based on the score.

Risk scoring system for the prevention of malware

Systems and methods are provided for protecting against bank card fraud and related crimes by providing a distress/fraud trigger at bank card machines, such as automated teller machines and point-of-sale terminals. The trigger initiates certain heightened-security processes designed to stop the crime, control damage, and help apprehend the criminal. For example, in one embodiment, the trigger involves the cardholder inputting a 'panic' personal identification code into the bank card machine. The panic personal identification code indicates to a party involved in the bank card transaction that a fraudulent transaction may be taking place. The heightened-security processes may include, for example, displaying that the bank card machine is out-of-order, dispensing money with a GPS tracking device, requesting additional identification steps, instituting delay tactics, notifying on-site personnel, or forwarding audio or video information from the bank card machine to a bank's command center in real time or near real time.

Growing community of inventors

Dallas, TX, United States of America

Mian Zhou