File origin determination

Details File origin determination File origin determination

2011-05-03

2011-05-03

Orgad, Edan (Department: 2439)

Information security

Monitoring or scanning of software or data including attack...

C726S023000, C726S024000

Reexamination Certificate

active

07937758

ABSTRACT:
An origin of a file of interest on a computer system is determined by monitoring file origin events on the computer system. A file of interest resulting from one of the file origin events may then be selected for tracing. A precursor file from which the file of interest emanates as a result of one of the file origin events is then identified. By iteratively performing the identifying operation upon successive precursor files substituted in the identifying operation for the file of interest, an origin file with no further precursor file may thus be identified. It is thus possible to trace back a given process or file of interest to a file container and/or location that initially introduced it into the computer system and any intermediate files or forms the process or file of interest may have assumed.

REFERENCES:
patent: 5062045 (1991-10-01), Janis et al.
patent: 5440723 (1995-08-01), Arnold et al.
patent: 5623600 (1997-04-01), Ji et al.
patent: 5638509 (1997-06-01), Dunphy et al.
patent: 5889943 (1999-03-01), Ji et al.
patent: 5960170 (1999-09-01), Chen et al.
patent: 6701456 (2004-03-01), Biessener
patent: 7243027 (2007-07-01), Ireland et al.
patent: 7269851 (2007-09-01), Ackroyd
patent: 7430638 (2008-09-01), Kellar
patent: 2003/0079158 (2003-04-01), Tower et al.
patent: 2003/0101381 (2003-05-01), Mateev et al.
patent: 2004/0167921 (2004-08-01), Carson et al.
patent: 2004/0177319 (2004-09-01), Horn
patent: 2005/0091291 (2005-04-01), Kaler et al.
patent: 2005/0120063 (2005-06-01), Koestler
patent: 2005/0125730 (2005-06-01), Goddard et al.
patent: 2005/0188272 (2005-08-01), Bodorin et al.
patent: 2005/0251540 (2005-11-01), Sim-Tang
patent: 2006/0053492 (2006-03-01), Wallace
patent: 2006/0123010 (2006-06-01), Landry et al.
patent: 2006/0161982 (2006-07-01), Chari et al.
patent: 2006/0179484 (2006-08-01), Scrimsher et al.
patent: 2007/0006304 (2007-01-01), Kramer et al.
patent: 2007/0067842 (2007-03-01), Greene et al.
patent: 2007/0150957 (2007-06-01), Hartrell et al.
patent: 2007/0157315 (2007-07-01), Moran
patent: 2008/0209562 (2008-08-01), Szor
patent: WO0073880 (2000-12-01), None
patent: WO2005026874 (2005-03-01), None
patent: WO2006076520 (2006-07-01), None
Notification of Transmittal of the International Search Report and the Written Opinion of the International Searching Authority, or the Declaration (Jul. 17, 2008).

Affiliated with

Also associated with

Rating

File origin determination does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with File origin determination, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and File origin determination will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-2666144