The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Mar. 26, 2019

Filed:

Nov. 22, 2016
Applicant:

George Mason Research Foundation, Inc., Fairfax, VA (US);

Inventors:

Angelos Stavrou, Springfield, VA (US);

Sushil Jajodia, Oakton, VA (US);

Anup K. Ghosh, Centreville, VA (US);

Rhandi Martin, St. James, BB;

Charalampos Andrianakis, Crete, GR;

Assignee:
Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 9/00 (2006.01); H04L 29/06 (2006.01); G06F 21/56 (2013.01); H04L 29/08 (2006.01);
U.S. Cl.
CPC ...
H04L 63/1416 (2013.01); G06F 21/566 (2013.01); H04L 63/0884 (2013.01); H04L 63/145 (2013.01); G06F 2221/2103 (2013.01); G06F 2221/2119 (2013.01); H04L 63/08 (2013.01); H04L 67/02 (2013.01);
Abstract

A transparent proxy for malware detection includes a monitor module, a protocol determination module, a challenge generation module, a response determination module, and a data control module. The monitor module examines data originating from an application towards a remote server. The protocol determination module identifies the protocol type used for the data. The challenge generation module produces a challenge for the application based upon the protocol type, sends the challenge to the application, and maintains a state related to the data and the challenge. The response determination module makes a determination if an automatic non-interactive application response is received in response to the challenge from the application. The data control module allows the first data to continue to the remote server when the determination is valid. The data control module reports malware detection and blocks the data to continue to the remote server when the determination is invalid.


Find Patent Forward Citations

Loading…