Method and system for isolating suspicious email

Details Method and system for isolating suspicious email Method and system for isolating suspicious email

2005-05-17

2010-11-09

Arani, Taghi T (Department: 2438)

Information security

Monitoring or scanning of software or data including attack...

Intrusion detection

C726S015000, C726S023000, C726S025000, C726S026000, C713S164000, C713S165000, C713S188000

Reexamination Certificate

active

07832012

ABSTRACT:
A method for detecting malicious programs, the method includes determining whether an object is suspicious, opening the suspicious object in a disposable, secure, single purpose VM (virtual machine) session and detecting indications of malicious behavior when the suspicious object is opened within the VM session.

REFERENCES:
patent: 5842002 (1998-11-01), Schnurer et al.
patent: 6192512 (2001-02-01), Chess
patent: 6282175 (2001-08-01), Steele et al.
patent: 6757830 (2004-06-01), Tarbotton et al.
patent: 6792556 (2004-09-01), Dennis
patent: 6901519 (2005-05-01), Stewart et al.
patent: 2002/0056076 (2002-05-01), Made
patent: 2002/0194490 (2002-12-01), Halperin et al.
patent: 2003/0088680 (2003-05-01), Nachenberg et al.
patent: 2003/0135791 (2003-07-01), Natvig
patent: 2003/0149726 (2003-08-01), Spear
patent: 2004/0111623 (2004-06-01), Miller et al.
patent: 2004/0205419 (2004-10-01), Liang et al.
patent: 2004/0254925 (2004-12-01), Clough
patent: 1 136 873 (2003-06-01), None
patent: WO 00/34867 (2000-06-01), None
patent: WO 03/063431 (2003-07-01), None
Wikipedia (Oct. 23, 2008) en.wikipedia.org/wiki/Virtual—machine.
Notification of Transmittal of the International Search Report for application PCT/US2005/016994 (7 pages), Sep. 21, 2005.
Written Opinion of the International Searching Authority for application PCT/US2005/016994 (5 pages), Sep. 21, 2005.
XP-002241249 Norman; Norman Virus Control for Workstations; Version 5.00; Reference Guide (8 pages), Mar. 2001.
Notification of Transmittal of the International Search Report for application PCT/US2005/016996 (9 pages), Nov. 30, 2005.
Written Opinion of the International Searching Authority for application PCT/US2005/016996 (7 pages), Nov. 30, 2005.
International Searching Authority, Invitation to Pay Additional Fees for application PCT/US2005/016996 (5 pages), Oct. 6, 2005.
EPO Communication Pursuant to Article 94(3) EPC; Application No. 05 762 177.3-1245; Ref: HCD/J00049168EP.

Affiliated with

Also associated with

Rating

Method and system for isolating suspicious email does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Method and system for isolating suspicious email, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and system for isolating suspicious email will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4179904