F-secure Corporation

Timo Hirvonen

A method and device for preventing a browser-originating attack in a local area network. A security device in the local area network intercepts a message from a first device in the local area network towards a second device in the local area network. The message requests connection between the first device and the second device. The security device prompts a user of the first device to approve the connection. In the event that the user approves the connection the first device is allowed to connect to the second device, and in the event that the user does not approve the connection the connection attempt is terminated.

Preventing browser-originating attacks

A method of foiling a document exploit type attack on a computer, where the attack attempts to extract malware code from within a document stored on the computer. The method includes monitoring the computer in order to detect repeated function calls made by a given process in respect of the same function but different file descriptors; and in the event that such repeated function calls are detected or the number of such repeated function calls exceeds some threshold, terminating the process that initiated the function calls.

Foiling a document exploit attack

Download control is disclosed. An apparatus includes one or more processors, and one or more memories including computer program code. The one or more memories and the computer program code configured to, with the one or more processors, cause the apparatus at least to perform: obtain one or more cryptographic hash values of a target file to be downloaded; cause transmission of the one or more cryptographic hash values to a trusted source; obtain reputation data relating to the target file originated from the trusted source in response to the transmission of the one or more cryptographic hash values; and control download of the target file on the basis of the reputation data.

Growing community of inventors

Espoo, Finland

Timo Hirvonen