Customized alerting of users to probable data theft

Details Customized alerting of users to probable data theft Customized alerting of users to probable data theft

2011-01-18

2011-01-18

Arani, Taghi T (Department: 2438)

Information security

Monitoring or scanning of software or data including attack...

C713S183000, C713S193000, C709S245000, C709S246000

Reexamination Certificate

active

07873999

ABSTRACT:
Computer-implemented methods, systems, and computer-readable media for determining (200) an action time when an action is taken regarding an executable content; storing (205) the action time with an indication of the executable content; storing (215) an entry time and an indication of the entered data source when the data processing system enters one of the plurality of data sources; receiving (220) an indication that the executable content is infected with a malicious code; receiving (225) an indication of a data source targeted by the malicious code; scanning the data processing system for the malicious code at a scan time; storing (230) the scan time; determining (245) whether one of the plurality of data sources corresponds to the targeted data source; and when it is determined that one of the plurality of data sources corresponds to the targeted data source, determining (255) whether the entry time occurs after the action time and before the scan time; and when it is determined that the entry time occurs after the action time and before the scan time, sending (260) a warning regarding the potential threat.

REFERENCES:
patent: 6088803 (2000-07-01), Tso et al.
patent: 6314409 (2001-11-01), Schneck
patent: 6928553 (2005-08-01), Xiong et al.
patent: 2002/0032677 (2002-03-01), Morgenthaler et al.
patent: 2002/0083343 (2002-06-01), Crosbie
patent: 2002/0087882 (2002-07-01), Schneier et al.
patent: 2002/0157020 (2002-10-01), Royer
patent: 2003/0037251 (2003-02-01), Frieder et al.
patent: 2003/0051026 (2003-03-01), Carter
patent: 2005/0050359 (2005-03-01), Liang
patent: 2005/0081059 (2005-04-01), Bandini et al.
patent: 2007/0192865 (2007-08-01), Mackin
patent: WO 01/71499 (2001-09-01), None
Lee, Sin Yeung; Low, Wai Lup and Wong, Pei Yuen, “Learning Fingerprints for a Database Intrusion Detection System”, Computer Security Laboratory, DSO National Labortories, Singapore, ESORICS Nov. 2002, LNCS 2502, pp. 264-279.
Low, Wai Lup, et al., “DIDAFIT: Detecting Intrusions In Databases Through Fingerprinting Transactions,” ICEIS 2002, Fourth International Conference On Enterprise Information Systems, vol. 1, Apr. 3-6, 2002, pp. 121-128, Ciudad Real, Spain.
Change log for Analysis Console for Intrusion Detection (Acid), indicating release date of Sep. 8, 2000 [online]. Andrew.cmu.edu [retrieved Apr. 18, 2003]. Retrieved from the Internet: <URL: http://www.andrew.cmu.edu/˜rdanyliw/snort/CHANGELOG>, U.S.A.
AirCERT web page, last updated Sep. 18, 2000 [online]. Cert.org [retrieved Apr. 18, 2003]. Retrieved from the Internet: <URL: http://www.cert.org/kb/aircert/>, U.S.A.
Analysis Console for Intrusion Detection (ACID) web page [online]. Andrew.cmu.edu [retrieved Apr. 18, 2003]. Retrieved from the Internet: <URL: http://www.andrew.cmu.edu/˜rdanyliw/snort/snortacid.html>, U.S.A.
Schneier, Bruce, Managed Security Monitoring: Network Security for the 21st Century, 2001 [online]. Counterpane.com [retrieved Apr. 18, 2003]. Retrieved from the Internet: <URL: http://www.counterpane.com/msm.pdf>, U.S.A.
Web page, announcing Nov. 11, 2000 release of Dshield [online]. Deja.com [retrieved Apr. 18, 2003]. Retrieved from the Internet: >URL: http://groups.google.com/groups?selm=8vm48v%245pd%241%40nnrp1.deja.com&oe=UTF-8&output=gplain>, U.S.A.
e=Security, Inc., Correlation Technology for Security Event Management, Oct. 7, 2002 [online]. eSecurityins.com [retrieved Apr. 18, 2003]: Retrieved from the Internet: <URL: http://www.esecurityinc.com/downloads/Correlation—WP.pdf>, Vienna, VA.
MyNetWatchman.com web pages indicating 9/00 beta release [online]. MyNetWatchman.com [retrieved Apr. 18, 2003]. Retrieved from the Internet: <URL: http://www.mynetwatchman.com/mynetwatchman/relnotes.htm>, Alpharetta, GA.
2000 Review of eSecurity product on Network Security web page [online]. SCMagazine.com [retrieved Apr. 18, 2003]. Retrieved from the Internet: <URL: http://www.scmagazine.com/scmagazine/2000—12/testc
etwork.htm#Open>.
“Caltarian Security Technology Platform”, Riptech web pages [online]. Symantec.com [retrieved Apr. 18, 2003]. Retrieved from the Internet: <URL: http://enterprisesecurity.symantec.com/Content/displayPDF.cfm?SSSPDFID=35&EID=O>, U.S.A.
Slashdot.org web pages describing Dshield, dated Nov. 27, 2000 [online]. Slashdot.org [retrieved Apr. 18, 2003]. Retrieved from the Internet: <URL: http://slashdot.org/article.pl?sid=00/11/27/1957238&mode=thread>, U.S.A.
Chung, C., Gertz, M., and Levitt, K., “DEMIDS: A Misuse Detection System for Database Systems,” Department of Computer Science, University of California at Davis, Oct. 1, 1999, pp. 1-18.
SCIP Product, Microdasys—“The need to control, inspect and manage encrypted webtraffic.”[online]. Retrieved on Mar. 18, 2005. Retrieved from the Internet: <URL: http://www.microdasys.com/scipproduct+M54a708de802.html>. Author unknown, 2 pages, Czech Republic.
Microdasys, “S C I P Secured Content Inspection: Protecting the Enterprise from CryptoHacks,” 2003 by Microdasys Inc., 2 pages, Czech Republic.
Marketing, “Digital Certificates—Best Practices—A Microdasys Whitepaper,” bestpractice.doc, Revision 1.1 (Jul. 31, 2003), 6 pages, Czech Republic.
Network Computing Solutions—“Microdasys SCIP” [online]. Retrieved on Mar. 18, 2005. Retrieved from the Internet: <URL: http://www.ncs/cz/index.php?language=en&menuitem-4&subitem=13>, 2 pages, Czech Republic.
Network Computing Solutions—NSC Homepage—News [online]. Retrieved on Mar. 18, 2005. Retrieved from the Internet: <URL: http://www.nsc.cz/index.php?language=en&menuitem=0&subitem=4&subitem=13>, 3 pages, Czech Republic.
“SSL Stripper Installation Guide,” [online]. Retrieved in Mar. 2005 from the Internet: <URL: http://www.sslstripper.com>, 2 pages, U.S.A.
SSL Stripper Home Page, “Security Solutions: SSL Stripper,” [online]. Retrieved on Mar. 18, 2005. Retrieved from the Internet: <URL: http://www.vroyer.org/sslstripper/index.html>, 2 pages, Oct. 15, 2004, U.S.A.
SSL Stripper Sample Screenshots, “Security Solutions: Sample Screenshots,” [online]. Retrieved on Mar. 18, 2005. Retrieved from the Internet: <URL: http://www.vroyer.org/sslstripper/screenshots.html>, 3 pages, Oct. 15, 2004, U.S.A.
Webwasher AG/Full feature set, “Full feature set,” [online]. Retrieved on Mar. 18, 2005. Retrieved from the Internet: <URL: http://www.webwasher.com/enterprise/products/webwasher—products/ssl—scanner/full—feature—set..html?l...>, 2 pages.
Webwasher AG/Webwasher 1000 CSM Appliance, “Webwasher 1000 CSM Appliance,” [online]. Retrieved on Mar. 18, 2005. Retrieved from the Internet: <URL: http://www.webwasher.com/enterprise/products/webwasher—products/csm—appliance/index...> 2 pages.
Webwasher AG/Webwasher URL Filter, “Webwasher URL Filter,” [online]. Retrieved on Mar. 18, 2005. Retrieved from the Internet: <URL: http://www.webwasher.com/enterprise/products/webwasher—products/webwasher—url—filter..> 1 page.
Webwasher AG/Webwasher Anti Virus, “Webwasher Anti Virus,” [online]. Retrieved on Mar. 18, 2005. Retrieved from the Internet: <URL: http://www.webwasher.com/enterprise/products/webwasher—products/anti—virus/index.html...>, 2 pages.
Webwasher AG/Webwasher Anti Spam, “Webwasher Anti Spam,” [online]. Retrieved on Mar. 18, 2005. Retrieved from the Internet: <URL: http://www.webwasher.com/enterprise/products/webwasher—products/anti—spam/index.htm...>, 1 pages.
Webwasher AG/Webwasher Content Protection, “Webwasher Content Protection,” [online]. Retrieved on Mar. 18, 2005. Retrieved from the Internet: <U

Affiliated with

Also associated with

Rating

Customized alerting of users to probable data theft does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Customized alerting of users to probable data theft, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Customized alerting of users to probable data theft will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-2627454