Goods & Services

Computer hardware; computer software; Data processing apparatus and instruments; data processing equipment; Computer software for use in remote meter monitoring; Cloud network monitoring software; Downloadable computer software for remote monitoring and analysis; Computer software for the monitoring of computer systems; Downloadable computer software applications; Computer firewall software; Work stations [computers]; Computer hardware modules for use in electronic devices using the Internet of Things [IoT]; Computer networking and data communications equipment; thin client computers; software development tools; Security software; monitors; microprocessors; downloadable computer software; Computer software applications, downloadable; Computer application software for mobile phones; network servers.

Goods & Services

Computer hardware; computer software; Data processing apparatus and instruments; data processing equipment; Computer software for use in remote meter monitoring; Cloud network monitoring software; Downloadable computer software for remote monitoring and analysis; Computer software for the monitoring of computer systems; Downloadable computer software applications; Computer firewall software; Work stations [computers]; Computer hardware modules for use in electronic devices using the Internet of Things [IoT]; Computer networking and data communications equipment; thin client computers; software development tools; Security software; monitors; microprocessors; downloadable computer software; Computer software applications, downloadable; Computer application software for mobile phones; network servers.

Abstract

An example method for a device to handle a file in an antivirus action has been disclosed. The method includes in response to receiving a signal indicative of having detected malware associated with the file, resetting a first session with a first client device and storing metadata associated with the file in a cache. The method further includes after having received the signal and in response to receiving a second request for the file from the first client device to establish a second session, retrieving the metadata from the cache, maintaining the second session, identifying a first part of the file based on the retrieved metadata during the second session, and performing the antivirus action to the identified first part of the file during the second session.

IPC Classes  ?

• H04L 29/06 - Communication control; Communication processing characterised by a protocol
• G06F 16/13 - File access structures, e.g. distributed indices
• G06F 16/172 - Caching, prefetching or hoarding of files

Abstract

A method and system for ensuring system security is disclosed. Based on the content of the data units the method and system monitor, the method and system retrieve the states and the dependency relationships among these states that are representative of unwanted patterns. The method and system store the states and the dependency relationships mentioned above in different types of memories according to the frequency of accessing the states. The frequency is calculated by comparing a number of test data patterns with the states in a sequence specified by the dependency relationships. The method and system further identify a set of suspected data units by comparing the data units with the retrieved states in a sequence specified by the retrieved dependency relationships, wherein the content of the set of the suspected data units collectively matches any of the unwanted patterns.

IPC Classes  ?

• G06F 11/00 - Error detectionError correctionMonitoring

Abstract

Methods and systems for processing multiple levels of data in system security approaches are disclosed. In one embodiment, a first set and a second set of resources are selected to iteratively and independently reverse multiple levels of format conversions on the payload portions of a data unit from a first file and a data unit from a second file, respectively. The first file and the second file are associated with a first transport connection and a second transport connection, respectively. Upon completion of the aforementioned reversal operations, the payload portions of a first reversed data unit and a second reversed data unit, which correspond to the data unit of the first file and the data unit of the second file, respectively, are inspected for suspicious patterns prior to any aggregation of the data units of the first file or the second file.

IPC Classes  ?

• H04L 9/00 - Arrangements for secret or secure communicationsNetwork security protocols

Abstract

A method and system for ensuring system security is disclosed. The method and system split a regular expression that corresponds to a number of patterns into sub-expressions. The dependency relationships among the finite automata that correspond to the sub-expressions are maintained. Then, as data units are put through these finite automata in a sequence that is based on the dependency relationships, suspected data units are identified. The suspected data units are the ones containing content that collectively matches one or more of the aforementioned patterns. Identification of the suspected data units is based on the merged results of the finite automata. Depending on the result of identifying the suspected data units, different actions are performed.

IPC Classes  ?

• G06F 7/04 - Identity comparison, i.e. for like or unlike values
• G06F 17/30 - Information retrieval; Database structures therefor
• H04L 9/32 - Arrangements for secret or secure communicationsNetwork security protocols including means for verifying the identity or authority of a user of the system
• G06F 11/00 - Error detectionError correctionMonitoring
• G06F 12/14 - Protection against unauthorised use of memory
• G06F 12/16 - Protection against loss of memory contents
• G08B 23/00 - Alarms responsive to unspecified undesired or abnormal conditions
• H04N 7/16 - Analogue secrecy systemsAnalogue subscription systems
• B41K 3/38 - Apparatus for stamping articles having integral means for supporting the articles to be stamped with means for deforming or punching the copy matter separate from the stamping means

Abstract

A method and system for ensuring system security is disclosed. The method and system utilize a first processing unit to split a regular expression that corresponds to a number of patterns into sub-expressions and maintain the dependency relationships among the finite automata that correspond to the sub-expressions. Then, the method and system utilize a second processing unit to move the data units through these finite automata in a sequence that is based on the dependency relationships to identify the suspected data units. The suspected data units are the ones containing content that collectively matches one or more of the aforementioned patterns. Identification of the suspected data units is based on the merged results of the finite automata.

IPC Classes  ?

• G06F 21/00 - Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity