Mcafee, Inc.

Networks Associates Technology, Inc.

Ntt Docomo, Inc.

Network Associates, Inc.

Networks Associates, Inc.

Victor Kouznetsov

Martin Fallenstedt

Davide Libenzi

Michael C Pak

Daniel Melchione

David W Palmer

Charles Leslie Vigue

Kenji Ishii

Masanori Fujita

Yasutaka Urakawa

Dan Melchione

Michael Chin-Hwan Pak

Andrei Ushakov

Ricky Huang

Kensaku Mori

Dmitry O Gryaznov

Koichi Asano

Khai Nhu Pham

Akira Ogata

Satish K Shetty

Ian Shaughnessy

Andrei Ouchakov

Katsuaki Yoshizawa

Nicholas C W Hogle

Yasutaka Urakama

Masanori B314 Heights Noukenndai 1-35-2 Fujita

A system, method, and computer program product are provided for initiating a security action at an intermediate layer coupled between a library and an application. In use, a library of data is stored. Additionally, system calls intended for operating on the data are produced, utilizing an application. Furthermore, the system calls are intercepted and a security action is initiated on the data in response to the interception, utilizing an intermediate layer between the library and the application.

System, method, and computer program product for initiating a security action at an intermediate layer coupled between a library and an application

A system, method and computer program product are provided for securely generating signatures. Initially received is a request to generate a signature at a secure server. Then, the signature is automatically generated at the secure server utilizing a private key stored at the secure server. The signature is then transmitted from the secure server. Such signature is capable of being used to verify an authenticity of an update (i.e. data and/or software) for a computer utilizing a public key.

Secure signature server system and associated method

A system, method and computer program product are provided for scanning a mobile wireless device for malware. Initially, a service agent is initiated utilizing a mobile wireless device. Next, information describing the mobile wireless device is transmitted to a back-end server over a wireless network utilizing the service agent of the mobile wireless device. An update is then received from the back-end server over the wireless network utilizing the service agent of the mobile wireless device. Subsequently, an anti-malware scanner installed on the mobile wireless device is updated so that the mobile wireless device may be scanned utilizing the updated anti-malware scanner.

Malware scanning wireless service agent system and method

A system, method and computer program product are provided for scanning a mobile wireless device for malware. Initially, an update command is received from a user utilizing a graphical user interface of a mobile wireless device. An anti-malware scanner installed on the mobile wireless device is then updated over a wireless network in response to the update command. The mobile wireless device is then scanned utilizing the updated anti-malware scanner. Such anti-malware scanner may be conditionally updated based on the update command so as to regulate usage of the wireless network with the mobile wireless device.

Malware scanning user interface for wireless devices

A system and method for secure and verified sharing of resources in a peer-to-peer network environment to facilitate efficient use of bandwidth are disclosed. The method for securely sharing resources over a peer-to-peer network generally comprises broadcasting a request by a requesting peer for a resource over the peer-to-peer network where the resource is identified with a resource version identifier, receiving a response from a responding peer on the peer-to-peer network indicating that the responding peer has the requested resource, retrieving the requested resource from the responding peer, and verifying the retrieved resource by ensuring the retrieved resource contains the version identifier embedded therein. Preferably, the verifying also includes verifying a digital signature, such as a 1024-bit VeriSign digital certificate, of the retrieved resource to ensure integrity of the retrieved resource.

System and method for secure and verified sharing of resources in a peer-to-peer network environment

A system for providing application services in a computing environment having both user-mode processes and privileged-mode processes. A user-mode component is provided with an interface configured to access an exposed privileged-mode interface. A configuration component specifies a list of installable code components that are authorized for installation, wherein privileged-mode functions will only be executed in response to accesses by the user-mode code component when the installable code component is represented on the list.

System and method for providing application services with controlled access into privileged processes

A system and method for distributed function discovery with third party responses in a peer-to-peer network to facilitate efficient use of bandwidth and resources are disclosed. The method for secure automatic selection of a designated service provider in a peer-to-peer network generally comprises broadcasting a digitally signed election initiating packet containing a value for at least one criteria by a sending node, awaiting response time-out period expiry or receipt of a response election packet, broadcasting a digitally signed election result packet indicating the sending node is the designated service provider if response time-out period expiry occurs prior to receipt of a response election packet, and awaiting for, verifying, and storing election result in an election result broadcast if receipt of a response election packet occurs prior to expiry of response time-out period. The election result broadcast may contain a value for the at least one criteria such that verifying the election result includes verifying that the value for at least one criteria in the response election packet wins over the value for at least one criteria in the initiating election packet. The criteria may be, for example, node name, MAC (media access control) address, Internet access, bandwidth, operating system, and processor speed.

System and method for automatic selection of service provider for efficient use of bandwidth and resources in a peer-to-peer network environment

A system, method and computer program product are provided for scanning a mobile wireless device for malware. A scan command is initially received from a user utilizing a mobile wireless device. Further, a component manager of the mobile wireless device is instantiated in response to the scan command. An anti-malware scanner is then executed utilizing the component manager. Further, the mobile wireless device is scanned utilizing the anti-malware scanner.

Wireless architecture with malware scanning component manager and associated API

A system and method includes passive screening of transient messages in a distributed computing environment. A transient packet stream is passively monitored at a network boundary. Incoming datagrams structured in compliance with a network protocol layer are received. One or more of the incoming datagrams are reassembled into a segment structured in compliance with a transport protocol layer. Contents of the reassembled segment are scanned for a presence of at least one of a computer virus and malware to identify infected message contents.

System and method for providing passive screening of transient messages in a distributed computing environment

A system, method and computer program product are provided for categorizing data. In use, features are extracted from binary data. Such extracted features are compared with a predetermined set of features. Based, at least in part, on the comparison, the binary data is categorized.

Binary data categorization engine and database

A system, method and computer program product are provided for accessing security or content analysis functionality utilizing a mobile communication device. Included is an operating system installed on a mobile communication device capable of communicating via a wireless network. Further provided is an application program installed on the mobile communication device and executed utilizing the operating system for performing tasks. A scanning subsystem remains in communication with the application program via an application program interface. Such scanning subsystem is adapted for accessing security or content analysis functionality in conjunction with the tasks performed by the application program.

API system, method and computer program product for accessing content/security analysis functionality in a mobile communication framework

A method and system for updating anti-intrusion software is provided. In a preferred embodiment, a computer program product updates anti-intrusion software on a computer network which has an anti-intrusion monitor server. The anti-intrusion monitor server recognizes attacks on the computer network in accordance with attack pattern information contained in the anti-intrusion software. The computer program product includes computer code that installs modified attack pattern information onto a central anti-intrusion server, and computer code that transfers the modified attack pattern information from the central anti-intrusion server to the anti-intrusion monitor server using push technology. The result is that newly discovered attack patterns are capable of being rapidly communicated from the central anti-intrusion server to the computer network.

Anti-intrusion software updating system and method

A system, method and computer program product are provided for efficiently updating a scanning subsystem of a mobile communication device. Initially received is a first portion of an update adapted for updating a scanning subsystem of a mobile communication device. Further, more portions of the update are received in addition to the receipt of the first portion of the update. The update is then installed with the scanning subsystem.

Update system and method for updating a scanning subsystem in a mobile communication framework

A system and method for providing Web browser-based remote network appliance configuration in a distributed computing environment is described. A query message is broadcast from an applet executing within a Web browser to one or more network appliances. The network appliances are interconnected within a bounded network domain defined by a common network address space. A response message containing network settings, including a physical network address, is received by the applet from at least one such network appliance responsive to the query message and processed. A configuration packet is generated and sent using the physical network address for each at least one such network appliance sending a response message and requiring configuration.

System and method for providing web browser-based secure remote network appliance configuration in a distributed computing environment

A system and method for distributing portable computer virus definition records with binary file conversion are described. One or more virus definition records are stored into a structured virus database. Each virus definition record includes an identifier uniquely identifying a computer virus, at least one virus name associated with the computer virus, a virus definition sentence comprising object code providing operations to detect the identified computer virus within a computer system, and a virus removal sentence comprising object code providing operations to clean the identified computer virus from the computer system. At least one updated virus definition record is stored into the structured virus database indexed by the identifier and the at least one virus name for each virus definition record. The virus definition records stored in the structured virus database are converted into a virus data file. The virus data file includes virus definition sets. Each virus definition set includes binary data encoding instructions to detect the computer virus within a computer system, instructions to clean the computer virus from the computer system, and names associated with the computer virus.

Growing community of inventors

Aloha, OR, United States of America

Victor Kouznetsov