Identifying threats in electronic messages

Details Identifying threats in electronic messages Identifying threats in electronic messages

2006-05-05

2010-12-14

Lanier, Benjamin E (Department: 2432)

Information security

Monitoring or scanning of software or data including attack...

Intrusion detection

Reexamination Certificate

active

07854007

ABSTRACT:
Early detection of computer viruses and other message-borne threats is provided by applying heuristic tests to message content and examining sender reputation information when no virus signature information is available. As a result, a messaging gateway can suspend delivery of messages early in a virus outbreak, providing sufficient time for updating an anti-virus checker that can strip virus code from the messages. A dynamic and flexible threat quarantine queue is provided with a variety of exit criteria and exit actions that permits early release of messages in other than first in, first-out order. A message scanning method is described in which early exit from parsing and scanning can occur by matching threat rules only to selected message elements and stopping rule matching as soon as a match on one message element exceeds a threat threshold.

REFERENCES:
patent: 5933416 (1999-08-01), Schenkel et al.
patent: 6006329 (1999-12-01), Chi
patent: 6052709 (2000-04-01), Paul
patent: 6067619 (2000-05-01), Melvin et al.
patent: 6072942 (2000-06-01), Stockwell et al.
patent: 6119236 (2000-09-01), Shipley
patent: 6453327 (2002-09-01), Nielsen
patent: 6507866 (2003-01-01), Barchi
patent: 6546416 (2003-05-01), Kirsch
patent: 6615242 (2003-09-01), Riemers
patent: 6654787 (2003-11-01), Aronson et al.
patent: 6701440 (2004-03-01), Kim et al.
patent: 6708205 (2004-03-01), Sheldon et al.
patent: 6728690 (2004-04-01), Meek et al.
patent: 6748422 (2004-06-01), Morin et al.
patent: 6886099 (2005-04-01), Smithson et al.
patent: 6944616 (2005-09-01), Ferguson et al.
patent: 7076527 (2006-07-01), Bellegarda et al.
patent: 7149778 (2006-12-01), Patel et al.
patent: 7171450 (2007-01-01), Wallace et al.
patent: 7181498 (2007-02-01), Zhu et al.
patent: 7219148 (2007-05-01), Rounthwaite et al.
patent: 7272853 (2007-09-01), Goodman et al.
patent: 7331061 (2008-02-01), Ramsey et al.
patent: 7409708 (2008-08-01), Goodman et al.
patent: 7457823 (2008-11-01), Shraim et al.
patent: 7464264 (2008-12-01), Goodman et al.
patent: 7475118 (2009-01-01), Leiba et al.
patent: 7610344 (2009-10-01), Mehr et al.
patent: 7634810 (2009-12-01), Goodman et al.
patent: 2002/0004908 (2002-01-01), Galea et al.
patent: 2002/0023135 (2002-02-01), Shuster
patent: 2002/0059385 (2002-05-01), Lin
patent: 2002/0116463 (2002-08-01), Hart
patent: 2002/0198950 (2002-12-01), Leeds
patent: 2002/0199095 (2002-12-01), Bandini et al.
patent: 2003/0023692 (2003-01-01), Moroo
patent: 2003/0023875 (2003-01-01), Hursey et al.
patent: 2003/0050988 (2003-03-01), Kucherawy
patent: 2003/0069935 (2003-04-01), Hasegawa
patent: 2003/0115485 (2003-06-01), Milliken
patent: 2003/0149726 (2003-08-01), Spear
patent: 2003/0212791 (2003-11-01), Pickup
patent: 2004/0006747 (2004-01-01), Tyler
patent: 2004/0019651 (2004-01-01), Andaker
patent: 2004/0054917 (2004-03-01), Obrecht et al.
patent: 2004/0068542 (2004-04-01), Lalonde et al.
patent: 2004/0083270 (2004-04-01), Heckerman et al.
patent: 2004/0083408 (2004-04-01), Spiegel et al.
patent: 2004/0117648 (2004-06-01), Kissel
patent: 2004/0139165 (2004-07-01), McMillan et al.
patent: 2004/0167964 (2004-08-01), Rounthwaite et al.
patent: 2004/0177120 (2004-09-01), Kirsch
patent: 2004/0181581 (2004-09-01), Kosco
patent: 2004/0250134 (2004-12-01), Kohler et al.
patent: 2004/0254990 (2004-12-01), Mittal
patent: 2004/0260776 (2004-12-01), Starbuck et al.
patent: 2005/0022008 (2005-01-01), Goodman et al.
patent: 2005/0060295 (2005-03-01), Gould et al.
patent: 2005/0060643 (2005-03-01), Glass et al.
patent: 2005/0080855 (2005-04-01), Murray
patent: 2005/0080856 (2005-04-01), Kirsch
patent: 2005/0188036 (2005-08-01), Yasuda
patent: 2005/0204005 (2005-09-01), Purcell et al.
patent: 2005/0246440 (2005-11-01), Yu
patent: 2005/0262209 (2005-11-01), Yu
patent: 2005/0283837 (2005-12-01), Olivier et al.
patent: 2006/0031306 (2006-02-01), Haverkos
patent: 2006/0095410 (2006-05-01), Ostrover et al.
patent: 2006/0123083 (2006-06-01), Goutte et al.
patent: 2006/0149820 (2006-07-01), Rajan et al.
patent: 2006/0161988 (2006-07-01), Costea et al.
patent: 2006/0167971 (2006-07-01), Breiner
patent: 2006/0168024 (2006-07-01), Mehr et al.
patent: 2007/0028301 (2007-02-01), Shull et al.
patent: 1509014 (2005-02-01), None
patent: WO/ 02/19069 (2002-03-01), None
Klensin, J., “Simple mail Transfer Protocol,” Network Working Group, RFC 2821, dated Apr. 2001, 79 pages.
International Searching Authority, “Notification of Transmittal of the International Search Report and the Written Opinion of the International Searching Authority, or the Declaration,” PCT/US05/18999, Feb. 6, 2007, 8 pages.
Current Claims, PCT/US05/18999, 14 pages.
International Bureau, “International Preliminary Report on Patentability,” PCT/US2005/018999, dated Feb. 28, 2007, 5 pages.
Current Claims, PCT/US2005/018999, 14 pages.
B. Lanier, “International Search Report,” published by International Bureau of WIPO for PCT/US06/17783, Geneva, Switzerland, Jun. 25, 2008, 3 pages.
B. Lanier, “Written Opinion of International Searching Authority,” published by International Bureau of WIPO for PCT/US06/17783, Geneva, Switzerland, Jun. 25, 2008, 6 pages.
Kephart, Jeffrey O., et al., “Biologically Inspired Defenses Against Computer Viruses”, International Joint Conference on Artificial Intelligence, 1995, 12 pages.
Mertz, David, “Spam Filtering Techniques”, Aug. 2002, 8 pages.
European Patent Office, “Communication pursuant to Article 96 (2) EPC”, European application No. 05 723 433.8-1244, received Aug. 22, 2007, 5 pages.
Claims, European application No. 05 723 433.8-1244, 13 pages.
International Searching Authority, “Notification of Transmittal of the International Search Report and the Written Opinion of the International Searching Authority, or the Declaration,” PCT/US05/19143, Dated Apr. 7, 2006, 8 pages.
Current Claims, PCT/US05/19143, 24 pages.
Garreston, “IronPort looks to be E-mail's Guardian”, Network World, Sep. 2004, 2 pages.
Spam Assassin, “SpamAssassin: Tests Performed”, Spam Assassin, Jun. 4, 2003, 51 pages.
Achelis, Steven B., “Technical Analysis from A to Z”, Introduction—Moving Averages, Equis International, 2001, 12 pages.
Visualware, “VisualRoute Server”, Visualware Inc., Mar. 12, 2001, 4 pages.
Office Action from CA for foreign patent application No. CA 2,607,005 dated Jul. 9, 2010.
Current claims in CA patent application No. CA 2,607,005.
Office Action from CA for foreign patent application No. CA 2,606,998 dated Jul. 7, 2010.
Current claims in CA patent application No. CA 2,606,998.

Affiliated with

Also associated with

Rating

Identifying threats in electronic messages does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Identifying threats in electronic messages, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Identifying threats in electronic messages will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4216451