Produits et services

Computer hardware; computer software; Data processing apparatus and instruments; data processing equipment; Computer software for use in remote meter monitoring; Cloud network monitoring software; Downloadable computer software for remote monitoring and analysis; Computer software for the monitoring of computer systems; Downloadable computer software applications; Computer firewall software; Work stations [computers]; Computer hardware modules for use in electronic devices using the Internet of Things [IoT]; Computer networking and data communications equipment; thin client computers; software development tools; Security software; monitors; microprocessors; downloadable computer software; Computer software applications, downloadable; Computer application software for mobile phones; network servers.

Produits et services

Computer hardware; computer software; Data processing apparatus and instruments; data processing equipment; Computer software for use in remote meter monitoring; Cloud network monitoring software; Downloadable computer software for remote monitoring and analysis; Computer software for the monitoring of computer systems; Downloadable computer software applications; Computer firewall software; Work stations [computers]; Computer hardware modules for use in electronic devices using the Internet of Things [IoT]; Computer networking and data communications equipment; thin client computers; software development tools; Security software; monitors; microprocessors; downloadable computer software; Computer software applications, downloadable; Computer application software for mobile phones; network servers.

Abrégé

An example method for a device to handle a file in an antivirus action has been disclosed. The method includes in response to receiving a signal indicative of having detected malware associated with the file, resetting a first session with a first client device and storing metadata associated with the file in a cache. The method further includes after having received the signal and in response to receiving a second request for the file from the first client device to establish a second session, retrieving the metadata from the cache, maintaining the second session, identifying a first part of the file based on the retrieved metadata during the second session, and performing the antivirus action to the identified first part of the file during the second session.

Classes IPC  ?

• H04L 29/06 - Commande de la communication; Traitement de la communication caractérisés par un protocole
• G06F 16/13 - Structures d’accès aux fichiers, p. ex. indices distribués
• G06F 16/172 - Mise en cache, pré-extraction ou accumulation de fichiers

Abrégé

A method and system for ensuring system security is disclosed. Based on the content of the data units the method and system monitor, the method and system retrieve the states and the dependency relationships among these states that are representative of unwanted patterns. The method and system store the states and the dependency relationships mentioned above in different types of memories according to the frequency of accessing the states. The frequency is calculated by comparing a number of test data patterns with the states in a sequence specified by the dependency relationships. The method and system further identify a set of suspected data units by comparing the data units with the retrieved states in a sequence specified by the retrieved dependency relationships, wherein the content of the set of the suspected data units collectively matches any of the unwanted patterns.

Classes IPC  ?

• G06F 11/00 - Détection d'erreursCorrection d'erreursContrôle de fonctionnement

Abrégé

Methods and systems for processing multiple levels of data in system security approaches are disclosed. In one embodiment, a first set and a second set of resources are selected to iteratively and independently reverse multiple levels of format conversions on the payload portions of a data unit from a first file and a data unit from a second file, respectively. The first file and the second file are associated with a first transport connection and a second transport connection, respectively. Upon completion of the aforementioned reversal operations, the payload portions of a first reversed data unit and a second reversed data unit, which correspond to the data unit of the first file and the data unit of the second file, respectively, are inspected for suspicious patterns prior to any aggregation of the data units of the first file or the second file.

Classes IPC  ?

• H04L 9/00 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité

Abrégé

A method and system for ensuring system security is disclosed. The method and system split a regular expression that corresponds to a number of patterns into sub-expressions. The dependency relationships among the finite automata that correspond to the sub-expressions are maintained. Then, as data units are put through these finite automata in a sequence that is based on the dependency relationships, suspected data units are identified. The suspected data units are the ones containing content that collectively matches one or more of the aforementioned patterns. Identification of the suspected data units is based on the merged results of the finite automata. Depending on the result of identifying the suspected data units, different actions are performed.

Classes IPC  ?

• G06F 7/04 - Contrôle d'égalité, c.-à-d. pour valeurs égales ou non
• G06F 17/30 - Recherche documentaire; Structures de bases de données à cet effet
• H04L 9/32 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité comprenant des moyens pour vérifier l'identité ou l'autorisation d'un utilisateur du système
• G06F 11/00 - Détection d'erreursCorrection d'erreursContrôle de fonctionnement
• G06F 12/14 - Protection contre l'utilisation non autorisée de mémoire
• G06F 12/16 - Protection contre la perte de contenus de mémoire
• G08B 23/00 - Alarmes réagissant à des conditions indésirables ou anormales, non spécifiées
• H04N 7/16 - Systèmes à secret analogiquesSystèmes à abonnement analogiques
• B41K 3/38 - Appareils à timbrer ayant des moyens incorporés pour supporter les objets à timbrer avec des moyens pour déformer ou perforer le matériau à timbrer indépendants des moyens de timbrage

Abrégé

A method and system for ensuring system security is disclosed. The method and system utilize a first processing unit to split a regular expression that corresponds to a number of patterns into sub-expressions and maintain the dependency relationships among the finite automata that correspond to the sub-expressions. Then, the method and system utilize a second processing unit to move the data units through these finite automata in a sequence that is based on the dependency relationships to identify the suspected data units. The suspected data units are the ones containing content that collectively matches one or more of the aforementioned patterns. Identification of the suspected data units is based on the merged results of the finite automata.

Classes IPC  ?

• G06F 21/00 - Dispositions de sécurité pour protéger les calculateurs, leurs composants, les programmes ou les données contre une activité non autorisée