Proactive protection against e-mail worms and spam

Details Proactive protection against e-mail worms and spam Proactive protection against e-mail worms and spam

2008-05-13

2008-05-13

Vu, Kim (Department: 2135)

Information security

Monitoring or scanning of software or data including attack...

C713S188000, C726S013000

Reexamination Certificate

active

10321079

ABSTRACT:
Methods, apparati, and computer-readable media for detecting the presence of malicious computer code in a plurality of e-mails. In a method embodiment of the present invention, the following steps are performed for each e-mail: calculating a feature vector (80), said feature vector (80) being representative of a presence of at least one preselected feature in the e-mail; calculating at least one score (S) based upon said feature vector (80), each said score (S) being representative of a frequency of occurrence of an instance of a feature; determining whether any score (S) exceeds a preselected malicious threshold representative of malicious computer code; and when a score (S) exceeds a preselected malicious threshold, blocking said e-mail.

REFERENCES:
patent: 5495607 (1996-02-01), Pisello et al.
patent: 5675710 (1997-10-01), Lewis
patent: 5694569 (1997-12-01), Fischer
patent: 5819226 (1998-10-01), Gopinathan et al.
patent: 5826249 (1998-10-01), Skeirik
patent: 5832208 (1998-11-01), Chen et al.
patent: 5832527 (1998-11-01), Kawaguchi
patent: 5884033 (1999-03-01), Duvall et al.
patent: 6006242 (1999-12-01), Poole et al.
patent: 6023723 (2000-02-01), McCormick et al.
patent: 6052709 (2000-04-01), Paul
patent: 6072942 (2000-06-01), Stockwell et al.
patent: 6088803 (2000-07-01), Tso et al.
patent: 6125459 (2000-09-01), Andoh et al.
patent: 6161130 (2000-12-01), Horvitz et al.
patent: 6167434 (2000-12-01), Pang
patent: 6253169 (2001-06-01), Apte et al.
patent: 6298351 (2001-10-01), Castelli et al.
patent: 6347310 (2002-02-01), Passera
patent: 6370526 (2002-04-01), Agrawal et al.
patent: 6397200 (2002-05-01), Lynch, Jr. et al.
patent: 6397215 (2002-05-01), Kreulen et al.
patent: 6401122 (2002-06-01), Matsui et al.
patent: 6421709 (2002-07-01), McCormick et al.
patent: 6424960 (2002-07-01), Lee et al.
patent: 6442606 (2002-08-01), Subbaroyan et al.
patent: 6456991 (2002-09-01), Srinivasa et al.
patent: 6493007 (2002-12-01), Pang
patent: 6502082 (2002-12-01), Toyama et al.
patent: 6505167 (2003-01-01), Horvitz et al.
patent: 6546416 (2003-04-01), Kirsch
patent: 6721721 (2004-04-01), Bates et al.
patent: 6732273 (2004-05-01), Byers
patent: 6751789 (2004-06-01), Berry et al.
patent: 6757830 (2004-06-01), Tarbotton et al.
patent: 6772346 (2004-08-01), Chess et al.
patent: 6778941 (2004-08-01), Worrell et al.
patent: 6792412 (2004-09-01), Sullivan et al.
patent: 6842861 (2005-01-01), Cox et al.
patent: 6886099 (2005-04-01), Smithson et al.
patent: 6944555 (2005-09-01), Blackett et al.
patent: 6944821 (2005-09-01), Blackett et al.
patent: 6952779 (2005-10-01), Cohen et al.
patent: 6973578 (2005-12-01), McIchionc
patent: 7024403 (2006-04-01), Kyler
patent: 2001/0018685 (2001-08-01), Saito et al.
patent: 2002/0038308 (2002-03-01), Cappl
patent: 2002/0046207 (2002-04-01), Chino et al.
patent: 2002/0087649 (2002-07-01), Horvitz
patent: 2002/0138525 (2002-09-01), Karadimitriou et al.
patent: 2002/0147694 (2002-10-01), Dempsey et al.
patent: 2002/0147782 (2002-10-01), Dimitrova et al.
patent: 2002/0194489 (2002-12-01), Almogy et al.
patent: 2002/0199095 (2002-12-01), Bandini et al.
patent: 2002/0199186 (2002-12-01), Ali et al.
patent: 2002/0199194 (2002-12-01), Ali
patent: 2003/0023875 (2003-01-01), Hursey et al.
patent: 2003/0033587 (2003-02-01), Ferguson et al.
patent: 2003/0061287 (2003-03-01), Yu et al.
patent: 2003/0065926 (2003-04-01), Schultz et al.
patent: 2003/0088627 (2003-05-01), Rothwell et al.
patent: 2003/0110280 (2003-06-01), Brock et al.
patent: 2003/0110393 (2003-06-01), Brock et al.
patent: 2003/0110395 (2003-06-01), Presotto et al.
patent: 2003/0154394 (2003-08-01), Levin
patent: 2003/0167402 (2003-09-01), Stolfo et al.
patent: 2003/0233352 (2003-12-01), Baker
patent: 2004/0015554 (2004-01-01), Wilson
patent: 2004/0049478 (2004-03-01), Jasper et al.
patent: 2004/0059697 (2004-03-01), Forman
patent: 2004/0103310 (2004-05-01), Sobel et al.
patent: 2004/0117401 (2004-06-01), Miyata et al.
patent: 2004/0117641 (2004-06-01), Kennedy et al.
patent: 2004/0220975 (2004-11-01), Carpentier et al.
Wikipedia.org web pages (online). Wikipedia (retrieved Mar. 17, 2003). Retrieved from the Internet: <URL: http://www.wilipedia.org/w/wiki.phtml?title=—Machine—learning—&—printable=yes>.
Parkhouse, Jayne, “Pelican SafeTNet 2.0”[online]. Jun. 2000, SC Magazine Product Review, [retrieved on Dec. 1, 2003]. Retrieved from the Internet: <URL: http://www.scmagazine.com/scmagazine/standalone/pelican/sc—pelican.html.
outlook.spambully.com web pages [online]. Spam Bully [retrieved Jan. 16, 2003]. Copyright 2002. Retrieved from the Internet: <URL: http://outlook.spambully.com/about.php >.
cauce.org web pages [online]. Coalition Against Unsolicited Commercial Email [retrieved Mar. 17, 2003]. Retrieved from the Internet: <URL: http://www.cauce.org/about/problem.shtml>.
“Enterprise Protection Strategy”, Trend Micro, Inc.; [online]; retrieved on Dec. 3, 2002. Retrieved from the internet: <URL: http://www.trendmicro.com/en/products/eps/features.htm.
“How To Test Outbreak Commander”; Trend Micro, Inc., Aug. 2002, pp. 1-13, Cupertino, CA.

Affiliated with

Also associated with

Rating

Proactive protection against e-mail worms and spam does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Proactive protection against e-mail worms and spam, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Proactive protection against e-mail worms and spam will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-3928336