Information security – Monitoring or scanning of software or data including attack...
Reexamination Certificate
2005-12-27
2005-12-27
Moise, Emmanuel L. (Department: 2137)
Information security
Monitoring or scanning of software or data including attack...
C726S003000, C726S005000, C726S023000, C726S024000, C703S027000, C714S028000, C717S138000
Reexamination Certificate
active
06981279
ABSTRACT:
A system and a method are disclosed for dynamically analyzing software, some of whose potentially-important behaviors (such as worm-like behavior) may only be displayed when the software is executed in an environment where it has, or appears to have, access to a production network and/or to the global Internet. The software can be executed in a real or an emulated network environment that includes a monitoring component and an emulation component. The monitoring component serves to capture and/or record the behaviors displayed by the software and/or other components of the system, and the emulation component gives the software being analyzed the impression that it is executing with access to a production network and/or to the global Internet. The software being analyzed is effectively confined to the analysis network environment, and cannot in fact read information from, or alter any information on, any production network or the global Internet.
REFERENCES:
patent: 5398196 (1995-03-01), Chambers
patent: 5440723 (1995-08-01), Arnold et al.
patent: 5636371 (1997-06-01), Yu
patent: 5734865 (1998-03-01), Yu
patent: 5812826 (1998-09-01), McLain, Jr.
patent: 5826013 (1998-10-01), Nachenberg
patent: 5842002 (1998-11-01), Schnurer et al.
patent: 5978917 (1999-11-01), Chi
Bishop et al., “An Isolated Network for Research”, The 19th NISSC, pp. 1-9, (found at http://seclab.cs.ucdavis.edu/papers.html.), Oct. 1996.
Bishop et al., “An Isolated Network for Research”, Oct. 1996, The 19th NISSC, (http://seclab.cs.ucdavis.edu/papers.html.), pp. 1-9.
An Immune System for Cyberspace, Kephart et al., IEEE, 1997, pp. 879-884.
Biologically Inspired Defenses Against Computer Viruses, Kephart et al., not dated, pp. 985-996.
Arnold William C.
Chess David M.
Morar John F.
Segal Alla
Swimmer Morton G.
Fields Courtney
Harrington & Smith ,LLP
Moise Emmanuel L.
Perez-Pineiro Rafael
LandOfFree
Method and apparatus for replicating and analyzing worm... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Method and apparatus for replicating and analyzing worm..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and apparatus for replicating and analyzing worm... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-3508399