System and method for locating malware

Details System and method for locating malware System and method for locating malware

2007-10-23

2007-10-23

Truong, T. B. (Department: 2135)

Information security

Monitoring or scanning of software or data including attack...

Intrusion detection

C726S024000, C382S103000, C715S736000

Reexamination Certificate

active

10956274

ABSTRACT:
A system and method for managing malware is described. One embodiment is designed to receive an initial URL associated with a Web site; download content from that Web site; identify any obfuscation techniques used to hide malware or pointers to malware; interpret those obfuscation techniques; identify a new URL as a result of interpreting the obfuscation techniques; and add the new URL to a URL database.

REFERENCES:
patent: 5623600 (1997-04-01), Ji et al.
patent: 5920696 (1999-07-01), Brandt et al.
patent: 6069628 (2000-05-01), Farry et al.
patent: 6073241 (2000-06-01), Rosenberg et al.
patent: 6092194 (2000-07-01), Touboul
patent: 6154844 (2000-11-01), Touboul
patent: 6167520 (2000-12-01), Touboul
patent: 6310630 (2001-10-01), Kulkarni et al.
patent: 6397264 (2002-05-01), Stasnick et al.
patent: 6460060 (2002-10-01), Maddalozzo, Jr. et al.
patent: 6480962 (2002-11-01), Touboul
patent: 6535931 (2003-03-01), Celi, Jr.
patent: 6611878 (2003-08-01), De Armas et al.
patent: 6633835 (2003-10-01), Moran et al.
patent: 6667751 (2003-12-01), Wynn et al.
patent: 6701441 (2004-03-01), Balasubramaniam et al.
patent: 6785732 (2004-08-01), Bates et al.
patent: 6804780 (2004-10-01), Touboul
patent: 6813711 (2004-11-01), Dimenstein
patent: 6829654 (2004-12-01), Jungck
patent: 6965968 (2005-11-01), Touboul
patent: 7058822 (2006-06-01), Edery et al.
patent: 2003/0217287 (2003-11-01), Kruglenko
patent: 2004/0030914 (2004-02-01), Kelley et al.
patent: 2004/0034794 (2004-02-01), Mayer et al.
patent: 2004/0064736 (2004-04-01), Obrecht et al.
patent: 2004/0080529 (2004-04-01), Wojcik
patent: 2004/0143763 (2004-07-01), Radatti
patent: 2004/0187023 (2004-09-01), Alagna et al.
patent: 2004/0225877 (2004-11-01), Huang
patent: 2005/0038697 (2005-02-01), Aaron
patent: 2005/0138433 (2005-06-01), Linetsky
U.S. Appl. No. 10/956,818, filed Oct. 1, 2004, Matthew Boney.
U.S. Appl. No. 10/956,575, filed Oct. 1, 2004, Matthew Boney.
U.S. Appl. No. 11/079,417, filed Mar. 14, 2005, Justin Ryan Bertman.
U.S. Appl. No. 11/171,924, filed Jul. 1, 2005, Paul Piccard.
U.S. Appl. No. 11/199,468, filed Aug. 8, 2005, Philip Maddaloni.
U.S. Appl. No. 11/180,161, filed Jul. 13, 2005, Paul L. Piccard et al.
U.S. Appl. No. 11/408,215, filed Apr. 20, 2006, Matthew Boney.
U.S. Appl. No. 11/408,146, filed Apr. 20, 2006, Matthew Boney.
U.S. Appl. No. 11/408,145, filed Apr. 20, 2006, Matthew Boney.
U.S. Appl. No. 11/462,781, filed Aug. 7, 2006, Harry M. McCloy et al.
Codeguru, Three Ways to Inject Your Code Into Another Process, by Robert Kuster, Aug. 4, 2003, 22 pgs.
Codeguru, Managing Low-Level Keyboard Hooks With The Windows API for VB .Net, by Paul Kimmel, Apr. 18, 2004, 10 pgs.
Codeguru, Hooking The Keyboard, by Anoop Thomas, Dec. 13, 2001, 6 pgs.
Illusive Security, Wolves In Sheep's Clothing: malicious DLLs Injected Into trusted Host Applications, Author Unknown, http://home.arcor.de/scheinsicherheit/dll.htm 13 pgs.
DevX.com, Intercepting Systems API Calls, by Seung-Woo Kim, May 13, 2004, pgs.
Microsoft.com, How To Subclass A Window in Windows 95, Article ID 125680, Jul. 11, 2005, 2005, 2 pgs.
MSDN, Win32 Hooks by Kyle Marsh, Jul 29, 1993, 15 pgs.
PCT Search Report, PCT/US05/34874, Jul. 5, 2006, 7 Pages.

Affiliated with

Also associated with

Rating

System and method for locating malware does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with System and method for locating malware, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and System and method for locating malware will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-3860644