The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Nov. 02, 2021
Filed:
Apr. 05, 2017
Applicant:
Sophos Limited, Abingdon, GB;
Inventors:
Karl Ackerman, Topsfield, MA (US);
Mark David Harris, Oxon, GB;
Kenneth D. Ray, Seattle, WA (US);
Andrew J. Thomas, Oxfordshire, GB;
Daniel Stutz, Karlsruhe, DE;
Assignee:
Sophos Limited, Abingdon, GB;
Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); G06F 21/33 (2013.01);
U.S. Cl.
CPC ...
H04L 63/1425 (2013.01); H04L 63/1458 (2013.01); G06F 21/33 (2013.01); H04L 63/0245 (2013.01); H04L 63/1408 (2013.01); H04L 63/1416 (2013.01); H04L 63/1491 (2013.01); H04L 2463/141 (2013.01);
Abstract
In the context of network activity by an endpoint in an enterprise network, malware detection is improved by using a combination of reputation information for a network address that is accessed by the endpoint with reputation information for an application on the endpoint that is accessing the network address. This information, when combined with a network usage history for the application, provides improved differentiation between malicious network activity and legitimate, user-initiated network activity.