Mcafee, Inc.

Raoul Tiddy

Michael G Bishop

Nicholas Liebmann

Igor G Muttik

Alexander J Hinchliffe

Mike Bishop

Christopher C Williams

Disclosed are systems and methods to perform coordinated blocking of source addresses, such as an Internet Protocol (IP) addresses, across a plurality of network appliances (e.g., gateways). In one disclosed embodiment the method and system temporarily alter a configuration of one or more network appliances (based on user defined configuration parameters) to allow communication from a 'blocked' IP address for a period of time. A network appliance can then 'receive' an email and perform analysis and provide results of the analysis to a reputation service. Thereby, the temporarily allowed communication can be used to learn information about a threat which would not have been available if all communication from that IP address had actually been blocked at the network appliance.

Distributed system and method for tracking and blocking malicious internet hosts

A method includes detecting a portion of data on an electronic device, determining a first representation of the malware status of the data, quarantining the data for a period of time, estimating whether the data is associated with malware by comparing the first and second representation, and, based on the estimation, releasing the data from quarantine. The first representation indicates that the malware status of the data is not certain to be safe and the malware status of the data is not certain to be malicious.

Dynamic quarantining for malware detection

Growing community of inventors

Thame, United Kingdom

Raoul Tiddy