Malware detection using a white list

Details Malware detection using a white list Malware detection using a white list

2011-08-16

2011-08-16

Wasel, Mohamed (Department: 2454)

Information security

Monitoring or scanning of software or data including attack...

Vulnerability assessment

C709S203000, C726S022000, C726S023000, C726S024000

Reexamination Certificate

active

08001606

ABSTRACT:
A reputation server is coupled to multiple clients via a network. A security module at a client identifies an application and determines whether it is on a white list. If the application is not on the white list, the security module monitors the application using a strict set of signatures. If the application is on the white list, the security module monitors the application using a relaxed set of signatures. The relaxed set of signatures can exclude legitimate characteristics possessed by the application as specified by the white list. The security module evaluates whether the application is malicious based at least in part on whether it possesses suspicious characteristics described by the signatures. The reputation server receives reports from clients identifying applications and describing characteristics possessed by the applications and uses the reports to generate the white list.

REFERENCES:
patent: 7571482 (2009-08-01), Polyakov et al.
patent: 7730040 (2010-06-01), Reasor et al.
patent: 2007/0038677 (2007-02-01), Reasor et al.
patent: 2008/0147546 (2008-06-01), Weichselbaumer et al.
patent: 2010/0077479 (2010-03-01), Viljoen
patent: 2010/0083376 (2010-04-01), Pereira et al.
“TrustedSource™: the Next-Generation Reputation System White Paper,” Secure Computing Corporation, Oct. 2006, 6 pages.
Walsh, L., “Careful, Trend Micro Might Give You a Bad Web Reputation,” ChannelWeb Network, Mar. 26, 2007, 4 pages, [online] [Retrieved on Jun. 21, 2007] Retrieved from the Internet<URL:http://www.v3.crn.com/security/198500632>.

Affiliated with

Also associated with

Rating

Malware detection using a white list does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Malware detection using a white list, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Malware detection using a white list will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-2729065