Trend Micro Inc.

Tsun-Sheng Chou

Sung-Ching Lin

Chin-Ju Lin

A plug-in software module of a DNS server helps to enforce a network security policy. The plug-in module scans communication packets at a DNS server computer and intercepts a request from a user computer to access a web site. The intercepted request is not received by the DNS service. The plug-in module initiates a security check of the user computer over a network connection to determine if the user computer has implemented the security policy of the computer network. If the user computer does not implement the security policy then the plug-in module returns an IP address to the user computer that is the IP address of a security web site. The security web site then displays on the user's browser an indication of a security policy to be applied. The security web site may also perform the security check.

Network security policy enforcement integrated with DNS server

In one embodiment, an anti-virus verification unit detects connection messages transmitted by a network server and a network client on a network. The anti-virus verification unit determines a network address of the network client according to the connection messages. Using the network address, the anti-virus verification unit verifies if the network client has an anti-virus software.

Method, apparatus and system of anti-virus software implementation

In one embodiment, a protected process is monitored by one or more watchdog processes. Upon detection that the protected process has been abnormally terminated, the watchdog processes may initiate actions to identify and/or terminate one or more malicious processes terminating the protected process. For example, the watchdog processes may inject a detector in processes running in the computer. The detector may listen for an activity that would terminate the protected process, and report such activity to the watchdog processes. The watchdog processes may be configured to terminate malicious processes identified as abnormally terminating the protected process. Thereafter, the watchdog processes may restart the protected process.

Growing community of inventors

Taipei, Taiwan

Tsun-Sheng Chou