Ao Kaspersky Lab

Kaspersky Lab, Zao

Kaspersky Lab Ao

Ao Kapersky Lab

Victor V Yablokov

Konstantin M Filatov

Alexey P Komissarov

Evgeny Y Eliseev

Olga O Inozemtseva

Alexey M Chikov

Stepan N Deshevykh

Konstantin P Voronkov

Alexey A Demov

Anton V Tikhomirov

Vladislav V Martynenko

Andrey A Pravdivy

Nikolay V Borovikov

Oleg V Nevstruev

Denis A Minchenko

Roman S Unuchek

Anton S Samoylov

Alexander Y Shindin

Disclosed herein are systems and methods for anti-virus scanning of objects on a mobile device. In one aspect, an exemplary method comprises: receiving, by a security module, a command from a protection module of a third-party application to perform an anti-virus scan, when a mobile security application is installed or pre-installed, when the mobile security application is not activated, activating the mobile security application, when the mobile security application is not installed or pre-installed on the mobile device, installing and activating the mobile security application, transmitting the object to the mobile security application, performing an anti-virus scan of the object to determine whether the object is malicious, transmitting results of the anti-virus scan to a protection module of a third-party application, selecting at least one response measure based on the result of the anti-virus scan, and applying at least one selected response measure.

System and method of anti-virus scanning of objects on a mobile device

A method for securing a plurality of IoT devices using a gateway includes intercepting, by a gateway, information about interactions between a first IoT device and at least one of: a second IoT device, a computer server, and a computer service. One or more cyber security threats are detected by the gateway based on the intercepted information and based on information stored in at least one of a first database and a second database. The first database is configured to store information about IoT devices and the second database is configured to store information about cyber security threats. One or more cyber security threat mitigation actions are identified by the gateway to address the detected one or more cyber security threats. The identified one or more cyber security threat mitigation actions are performed by the gateway.

System and method for securing IoT devices through a gateway

Disclosed herein are systems and methods for providing security to an Internet of Things (IoT) device. An exemplary method comprises, obtaining, by an interceptor located on at least one gateway or the device, information about an interaction of the device with at least one of: other devices, service, and server; by an analysis tool located on the gateway: determining at least one category of the device and at least one category of a user of the device by interacting with a security service based on information received about the interaction of the device; receiving data from the security service, and identifying the security component to be installed on the device based on the data received from the security service, the category of the device and the category of a user of the device; and installing on the device, by the interceptor, the security component identified by the analysis tool.

System and method for providing security to IoT devices

Disclosed herein are systems and methods for installing a personalized application on a mobile device. In one aspect, an exemplary method comprises, identifying an application distribution source by analyzing settings of an operating system of the mobile device that were changed as a result of obtaining an application from the application distribution source, selecting resources for the application that correspond to the identified application distribution source when a resource database from which the selection is being performed contains at least one resource corresponding to the identified application distribution source, creating the personalized application by reconfiguring the application obtained from the application distribution source based on the selected resources, and installing, on the mobile device, the created personalized application.

System and method for installing a personalized application on a mobile device

Techniques are provided for generating groups of filtering rules. A priority list of filtering rules having a highest indicator of frequency of utilization among the filtering rules from the plurality of lists is determined from a plurality of lists of filtering rules. The priority list of filtering rules is transmitted to a mobile device. Each of remaining lists of filtering rules that have not been transmitted to the mobile device is divided into a plurality of parts. A plurality of groups of filtering rules is generated based on frequency of utilization within each of the remaining lists of filtering rules. Each generated group contains at most one part of each remaining list of filtering rules.

System and method for generating groups of filtering rules

Techniques are provided for downloading of filtering rules from a remote server onto a mobile device. A priority list is determined from lists of filtering rules, the priority list having a highest indicator of frequency of actuation of the filtering rules from the lists. The filtering rules are designated for use by a first application on the mobile device. The priority list is transmitted to the mobile device with the aid of a second application, the second application on the mobile device being a provider of the filtering rules for the first application. Each of the remaining lists of filtering rules are divided into parts. Groups of filtering rules are generated based on frequency of actuation within each of the remaining lists of filtering rules, each group having not more than one part of each remaining list of filtering rules.

System and method for managing filtering rules from a remote server

Disclosed are system and methods for controlling access to content from a user application executing in an isolated environment on a user device. An exemplary method includes intercepting, by a security application, data relating to content in a graphical user interface of the user application using an accessibility application programming interface (API) exposed by an operating system of the user device, and generating a first template associated with the content based on the intercepted data. The template specifies a pattern of elements of the graphical user interface. The method further includes determining a category of the content based on a comparison of the first template with a plurality of previously generated templates; and controlling access to the content of the graphical user interface based on the determined category.

System and method of controlling access to content using an accessibility API

Systems and methods for limiting applications launched without installation for the presence of malicious code. Applications launched without installation and which contain malicious code can be stopped or paused. Relationships between a fully-functional website-related application requiring installation and a functionally-restricted application launched without installation can be used to determine malicious code.

System and method of termination of a functionally-limited application interrelated with a website and started without installation

Disclosed are systems and methods for blocking access to interface elements of a page of an application in an applications store. In one exemplary aspect, a method comprises executing a restrictive application that restricts use of a computing device, determining that an application store page for the restrictive application is being presented in the applications store on the computing device by using an accessibility application programming interface (API), blocking access to one or more interface controls for evaluation of the application in the applications store, obtaining authentication data associated with an authorized user using the computing device and responsive to determining that the authentication data satisfies one or more conditions for unblocking, providing access to the interface controls.

System and method for controlling reviews in an application store

Disclosed are systems and methods for selecting a data entry mechanism for an application based on security requirements. An example method comprises: determining a plurality of activity states of an application during a creation of the application, determining, for each activity state of a subset of activity states of the plurality of activity states, whether a data entry mechanism of the application is dependent on the activity state, for each activity state of the subset of activity states for which the data entry mechanism is determined as being dependent on the activity state, determining security requirements corresponding to the activity state during the creation of the application and selecting a data entry mechanism for each of the determined security requirements corresponding to the activity state, during an activation of an activity corresponding to an activity state of the subset, activating a corresponding selected data entry mechanism.

System and method for selecting a data entry mechanism for an application based on security requirements

Disclosed are systems and methods for activating a data entry mechanism for an application based on security requirements. An example method comprises detecting, by a hardware processor, an activity state of the application during an execution of the application on a user device, determining the security requirements associated with the detected activity state, wherein the determined security requirements comprise properties for the data entry mechanism, activating the data entry mechanism for receiving user input for the application, wherein the data entry mechanism is based on the determined security requirements, and receiving the user input in accordance with the activated data entry mechanism.

System and method for activating a data entry mechanism for an application based on security requirements

Disclosed are systems and methods for receiving user input using a data entry mechanism activated for an application. An example method comprises detecting, by a hardware processor, an activity state of the application during an execution of the application on a user device, determining security requirements associated with the activity state, wherein the security requirements comprise properties for the data entry mechanism, selecting a data entry mechanism corresponding to the determined security requirements associated with the activity state, activating the selected data entry mechanism for receiving user input for the application, wherein the selected data entry mechanism is governed according to the properties of the security requirements associated with the activity state, receiving the user input in accordance with the activated data entry mechanism, and displaying a modified version of the user input according to the properties of the security requirements.

System and method for receiving user data using a data entry mechanism activated for an application

Disclosed are systems, methods and computer program products for adaptively modifying antivirus databases. In one example, a system stores in an antivirus database a list of file types and antivirus records for different file types. When the system receives files for performing antivirus analysis, it retrieves from the database the list of file types and uses it to determine file types of the received files. The system then retrieves from the database antivirus lists for the determined file types and uses them to perform antivirus analysis of the files. The system then identifies files with an unknown file type and attempts to determine the file type of these files. The system then updates the antivirus database by (i) adding to the list of file types a new file type corresponding to said unknown file type, and (ii) adding a new empty antivirus list corresponding to said unknown file type.

System and method for adaptive modification of antivirus databases

Disclosed are techniques for downloading of filtering rules onto a mobile device. The described technique includes determining, from among at least two lists of filtering rules intended for downloading onto a mobile device, a priority sublist with a high indicator of frequency of actuation of the filtering rules from the list. The priority list is downloaded onto the mobile device. Each of the remaining non-downloaded lists of filtering rules is broken up into parts of a certain size, and a set of groups of filtering rules is formed, in each of whose groups is placed not more than one part of each remaining non-downloaded list of filtering rules. The groups of filtering rules are downloaded onto the mobile device with a certain interval of time until said formed set of groups is fully downloaded.

System and method of downloading filtering rules onto a mobile device

Disclosed are systems and methods for selecting a data entry mechanism during application creation. An example method comprises: determining a plurality of activity states of an application during creation of the application, determining whether a data entry mechanism of the application is dependent on an activity state, determining security requirements corresponding to each of the plurality of activity states, selecting a data entry mechanism for each of the determined security requirements and activating a corresponding data entry mechanism during activation of each corresponding activity of the plurality of activity states.

Growing community of inventors

Moscow, Russia

Victor V Yablokov