The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Dec. 07, 2021

Filed:

Jul. 04, 2016
Applicant:

Mcafee, Llc, Santa Clara, CA (US);

Inventors:

Jin Yang, Shanghai, CN;

Yongnian Le, Shanghai, CN;

Igor Muttik, Aylesbury, GB;

Hong Li, El Dorado Hills, CA (US);

Assignee:

McAfee, LLC, San Jose, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/57 (2013.01); G06F 16/23 (2019.01); G06F 7/02 (2006.01); G06F 9/445 (2018.01); G06F 21/54 (2013.01); G06F 21/12 (2013.01);
U.S. Cl.
CPC ...
G06F 21/577 (2013.01); G06F 7/02 (2013.01); G06F 9/44526 (2013.01); G06F 16/2379 (2019.01); G06F 21/12 (2013.01); G06F 21/54 (2013.01); G06F 2221/033 (2013.01);
Abstract

An improved anti-malware protection system protects computers against exploits in a scripting language that may be run in a browser. The system comprises a recorder that records scripting language execution events, a trace generator that transforms the recorded scripting language execution events into an execution trace, and a security engine that scans the execution trace and advises a security software about exploits found in the execution trace. By hooking the recorder into a runtime application programming interface for the scripting language, the improved protection system can detect exploits dynamically without the need for a browser-dependent plugin. An optional plugin can be included to perform file-based analysis of the script in addition to the runtime analysis of the script. The system can provide an application programming interface that can be used by multiple security software programs from multiple vendors to create an enhanced security software product.


Find Patent Forward Citations

Loading…