Electrical computers and digital processing systems: support – Multiple computer communication using cryptography – Protection at a particular protocol layer
Reexamination Certificate
2005-02-01
2005-02-01
Peeso, Thomas R. (Department: 2131)
Electrical computers and digital processing systems: support
Multiple computer communication using cryptography
Protection at a particular protocol layer
C713S152000
Reexamination Certificate
active
06851058
ABSTRACT:
Anti-virus scanners can be deliberately disabled, inadvertently disabled, or simply slowed down to a point where the scanner becomes ineffective and the primary function of the scanning host device is disrupted when a suitably complex file is received by the scanning system for scanning. Archive files pose particular problems for scanners, since archives may contain very complex data structures, and require time consuming analysis. Virus scanners typically scan each element of an archive. Some virus scanners decompress each archive component for scanning. Virus developers have taken advantage of this scanning approach by creating complex archives designed to overwhelm a scanner, leaving a system unprotected or in a denial of service state. To counter such measures, when an archive (or other file) is passed to a scanner, various heuristics are applied to the archive so as to determine a risk-based scanning priority for the archive. Priorities can include normal priority, low priority for archives having suspicious characteristics, and discard without scanning for archives appearing to be constructed so as to overwhelm a scanner. Normal priority scans can occur immediately, while low priority scans can be relegated to only occurring while the scanning system is otherwise idle.
REFERENCES:
patent: 6546133 (2003-04-01), Temkin et al.
Network Associates, “White Papers”, http://www.nai.com/asp_set/buy_try/try/whitepapers.asp, 2000, Network Associates, USA.
Blakely , Sokoloff, Taylor & Zafman LLP
Hamaty Christopher J.
Networks Associates Technology Inc.
Peeso Thomas R.
LandOfFree
Priority-based virus scanning with priorities based at least... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Priority-based virus scanning with priorities based at least..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Priority-based virus scanning with priorities based at least... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-3450319