The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jan. 05, 2016

Filed:

Feb. 13, 2015
Applicant:

Websense, Inc., San Diego, CA (US);

Inventors:

Rajesh Kumar Sharma, San Diego, CA (US);

Winping Lo, San Diego, CA (US);

Joseph Papa, Carlsbad, CA (US);

Assignee:

Websense, Inc., San Diego, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/00 (2013.01); G06F 21/51 (2013.01); G06F 21/55 (2013.01); G06F 21/56 (2013.01); G06F 21/60 (2013.01); G06F 21/54 (2013.01);
U.S. Cl.
CPC ...
G06F 21/51 (2013.01); G06F 21/54 (2013.01); G06F 21/554 (2013.01); G06F 21/56 (2013.01); G06F 21/60 (2013.01);
Abstract

A system and method that trusts software executables existent on a machine prior to activation for different types of accesses e.g. execution, network, and registry. The system detects new executables added to the machine as well as previously existent executables that have been modified, moved, renamed or deleted. In certain embodiments, the system will tag the file with a flag as modified or newly added. Once tagged, the system intercepts particular types of file accesses for execution, network or registry. The system determines if the file performing the access is flagged and may apply one or more policies based on the requested access. In certain embodiments, the system intercepts I/O operations by file systems or file system volumes and flags metadata associated with the file. For example, the NT File System and its extended attributes and alternate streams may be utilized to implement the system.


Find Patent Forward Citations

Loading…