The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Mar. 14, 2017

Filed:

Oct. 12, 2015
Applicant:

Fireeye, Inc., Milpitas, CA (US);

Inventors:

Osman Abdoul Ismael, Palo Alto, CA (US);

Dawn Song, San Francisco, CA (US);

Phung-Te Ha, Dublin, CA (US);

Peter J. Gilbert, Winston Salem, NC (US);

Hui Xue, San Jose, CA (US);

Assignee:

FireEye, Inc., Milpitas, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 15/18 (2006.01); G06F 21/56 (2013.01); G06F 21/60 (2013.01); G06F 9/455 (2006.01);
U.S. Cl.
CPC ...
G06F 21/562 (2013.01); G06F 9/45558 (2013.01); G06F 21/60 (2013.01); G06F 2009/4557 (2013.01); G06F 2221/033 (2013.01);
Abstract

For one embodiment, a method is described that involves the instrumenting of an application of a computing system with at least one monitoring function, where the monitoring function is capable of operating in a run-time environment during processing of the instrumented application. The movement of data associated with the application is tracked by one or more monitoring functions. This data is at least partially identified by a storage location. Thereafter, a determination is made whether movement of the data from a first storage location to a second storage location is suspicious, and if so, suspicious movement of the data is reported.


Find Patent Forward Citations

Loading…