Finjan Software, Ltd.

Finjan, Inc.

Alearo Properties Limited Liability Company

Shlomo Touboul

Yigal Mordechai Edery

David R Kroll

Nimrod Itzhak Vered

Moshe Rubin

Moshe Matitya

Artem Melnick

Alexander Yermakov

Amit Shaked

Robert Edward Yusin

Nachshon Gal

Nirmrod Itzhak Vered

Protection systems and methods provide for protecting one or more personal computers ('PCs') and/or other intermittently or persistently network accessible devices or processes from undesirable or otherwise malicious operations of Java TN applets, ActiveX&#x2122; controls, JavaScript&#x2122; scripts, Visual Basic scripts, add-ins, downloaded/uploaded programs or other 'Downloadables' or &#x201c;mobile code&#x201d; in whole or part. A protection engine embodiment provides for monitoring information received, determining whether received information does or is likely to include executable code, and if so, causes mobile protection code (MPC) to be transferred to and rendered operable within a destination device of the received information. An MPC embodiment further provides, within a Downloadable-destination, for initiating the Downloadable, enabling malicious Downloadable operation attempts to be received by the MPC, and causing (predetermined) corresponding operations to be executed in response to the attempts.

Malicious mobile code runtime monitoring system and methods

A method for tracking the routing of an electronic document, including embedding a unique identifier within an electronic document and monitoring e-mail messages transmitted from senders to recipients, for detection of e-mail messages having the electronic document embedded therewithin or attached thereto, based on the unique identifier. A system and computer readable storage medium are also described and claimed.

Methods and systems for auto-marking, watermarking, auditing, reporting, tracing and policy enforcement via e-mail and networking systems

A method for scanning content, including identifying tokens within an incoming byte stream, the tokens being lexical constructs for a specific language, identifying patterns of tokens, generating a parse tree from the identified patterns of tokens, and identifying the presence of potential exploits within the parse tree, wherein said identifying tokens, identifying patterns of tokens, and identifying the presence of potential exploits are based upon a set of rules for the specific language. A system and a computer readable storage medium are also described and claimed.

Method and system for adaptive rule-based content scanners

Protection systems and methods provide for protecting one or more personal computers ('PCs') and/or other intermittently or persistently network accessible devices or processes from undesirable or otherwise malicious operations of Java TN applets, ActiveX&#x2122; controls, JavaScript&#x2122; scripts, Visual Basic scripts, add-ins, downloaded/uploaded programs or other 'Downloadables' or &#x201c;mobile code&#x201d; in whole or part. A protection engine embodiment provides, within a server, firewall or other suitable &#x201c;recommunicator,&#x201d; for monitoring information received by the communicator, determining whether received information does or is likely to include executable code, and if so, causes mobile protection code (MPC) to be transferred to and rendered operable within a destination device of the received information, more suitably by forming a protection agent including the MPC, protection policies and a detected-Downloadable. An MPC embodiment further provides, within a Downloadable-destination, for initiating the Downloadable, enabling malicious Downloadable operation attempts to be received by the MPC, and causing (predetermined) corresponding operations to be executed in response to the attempts, more suitably in conjunction with protection policies.

A security system for scanning content within a computer, including a network interface, housed within a computer, for receiving content from the Internet on its destination to an Internet application running on the computer, a database of rules corresponding to computer exploits, stored within the computer, a rule-based content scanner that communicates with said database of rules, for scanning content to recognize the presence of potential exploits therewithin, a network traffic probe, operatively coupled to the network interface and to the rule-based content scanner, for selectively diverting content from its intended destination to the rule-based content scanner, and a rule update manager that communicates with said database of rules, for updating said database of rules periodically to incorporate new rules that are made available. A method and a computer readable storage medium are also described and claimed.

Method and system for adaptive rule-based content scanners for desktop computers

A system for embedding messages within HTTP streams, including a gateway communicator, situated within a network gateway computer that communicates with at least one client computer, for receiving management data intended for the at least one client computer from a management server computer that communicates with the network gateway computer, a gateway data embedder situated within the network gateway computer for inserting non-HTTP management data within an HTTP message, and a client data extractor situated within each of the at least one client computer for extracting non-HTTP management data from within an HTTP message. A method and a computer readable storage medium are also described and claimed.

Embedding management data within HTTP messages

Protection systems and methods provide for protecting one or more personal computers ('PCs') and/or other intermittently or persistently network accessible devices or processes from undesirable or otherwise malicious operations of Java&#x2122; applets, ActiveX&#x2122; controls, JavaScript&#x2122; scripts, Visual Basic scripts, add-ins, downloaded/uploaded programs or other 'Downloadables' or &#x201c;mobile code&#x201d; in whole or part. A protection engine embodiment provides, within a server, firewall or other suitable &#x201c;re-communicator,&#x201d; for monitoring information received by the communicator, determining whether received information does or is likely to include executable code, and if so, causes mobile protection code (MPC) to be transferred to and rendered operable within a destination device of the received information, more suitably by forming a protection agent including the MPC, protection policies and a detected-Downloadable. An MPC embodiment further provides, within a Downloadable-destination, for initiating the Downloadable, enabling malicious Downloadable operation attempts to be received by the MPC, and causing (predetermined) corresponding operations to be executed in response to the attempts, more suitably in conjunction with protection policies.

Method and system for protecting a computer and a network from hostile downloadables

A computer gateway for an intranet of computers, including a scanner for scanning incoming files from the Internet and deriving security profiles therefor, the security profiles being lists of computer commands that the files are programmed to perform, a file cache for storing files, a security profile cache for storing security profiles for files, and a security policy cache for storing security policies for client computers within an intranet, the security policies including a list of restrictions for files that are transmitted to intranet computers. A method and a computer-readable storage medium are also described and claimed.

Method and system for caching at secure gateways

A policy-based cache manager, including a memory storing a cache of digital content, a plurality of policies, and a policy index to the cache contents, the policy index indicating allowable cache content for each of a plurality of policies, a content scanner for scanning a digital content received, to derive a corresponding content profile, and a content evaluator for determining whether a given digital content is allowable relative to a given policy, based on the content profile. A method is also described and claimed.

Growing community of inventors

Kefar-Haim, Israel

Shlomo Touboul