Patent EP0212119A2 successfully refreshed from Google Patents.
Patent US6167520A successfully refreshed from Google Patents.
US6167520A
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for protecting a client during runtime from hostile downloadables
Assignee: Finjan LLC
•
Filing: 1997-01-29
•
Granted: 2000-12-26
•
Expires: 2017-01-29
Abstract
Abstract A system and method examine execution or interpretation of a Downloadable for operations deemed suspicious or hostile, and respond accordingly. The system includes security rules defining suspicious actions and security policies defining the appropriate responsive actions to rule violations. The system includes an interface for receiving incoming Downloadable and requests made by the Downloadable. The system still further includes a comparator coupled to the interface for examining the Downloadable, requests made by the Downloadable and runtime events to determine whether a security policy has been violated, and a response engine coupled to the comparator for performing a violation-based responsive action.
Inventors
- 👤 Shlomo Touboul
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-06 19:47
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/14; H04L63/1441; H04L63/145; G; G06; G06F; G06F21/00; G06F21/50; G06F21/51; G06F21/52; G06F21/53; G06F2211/00; G06F2211/009; G06F2221/00; G06F2221/21; G06F2221/2119; G06F2221/2141
Claims Analysis
Total Claims: 16
Claim 1
Independent Claim
61 words
A computer-based method, comprising: monitoring the operating system during runtime for an event caused from a request made by a Downloadable; interrupting processing of the request; comparing information pertaining to the Downloadable against a predetermined security policy; and performing a predetermined responsive action based on the comparison, the predetermined responsive action including storing results of the comparison in an event log.
Claim 2
Dependent Claim
61 words
A computer-based method, comprising: monitoring the operating system during runtime for an event caused from a request made by a Downloadable; interrupting processing of the request; comparing information pertaining to the Downloadable against a predetermined security policy; and performing a predetermined responsive action based on the comparison, the predetermined responsive action including storing results of the comparison in an event log.
Claim 3
Dependent Claim
60 words
A computer-based method, comprising: monitoring the operating system during runtime for an event caused from a request made by a Downloadable; interrupting processing of the request; comparing information pertaining to the Downloadable against a predetermined security policy; and performing a predetermined responsive action based on the comparison, the predetermined responsive action including storing the Downloadable in a suspicious Downloadable database.
Claim 4
Dependent Claim
60 words
A computer-based method, comprising: monitoring the operating system during runtime for an event caused from a request made by a Downloadable; interrupting processing of the request; comparing information pertaining to the Downloadable against a predetermined security policy; and performing a predetermined responsive action based on the comparison, the predetermined responsive action including storing the Downloadable in a suspicious Downloadable database.
Claim 5
Independent Claim
76 words
A system, comprising: a security policy; an operating system interface for recognizing a runtime event caused from a request made by a Downloadable; a comparator coupled to the interface for comparing information pertaining to the received Downloadable with the security policy; a response engine coupled to the comparator for performing a predetermined responsive action based on the comparison with the security policy; and an event log coupled to the comparator for storing results of the comparison.
Claim 6
Independent Claim
76 words
A system, comprising: a security policy; an operating system interface for recognizing a runtime event caused from a request made by a Downloadable; a comparator coupled to the interface for comparing information pertaining to the received Downloadable with the security policy; a response engine coupled to the comparator for performing a predetermined responsive action based on the comparison with the security policy; and an event log coupled to the comparator for storing results of the comparison.
Claim 7
Independent Claim
74 words
A system, comprising: a security policy; an operating system interface for recognizing a runtime event caused from a request made by a Downloadable; a comparator coupled to the interface for comparing information pertaining to the received Downloadable with the security policy; a response engine coupled to the comparator for performing a predetermined responsive action based on the comparison with the security policy; and a suspicious Downloadable database for storing known and previously-deemed suspicious Downloadables.
Claim 8
Independent Claim
74 words
A system, comprising: a security policy; an operating system interface for recognizing a runtime event caused from a request made by a Downloadable; a comparator coupled to the interface for comparing information pertaining to the received Downloadable with the security policy; a response engine coupled to the comparator for performing a predetermined responsive action based on the comparison with the security policy; and a suspicious Downloadable database for storing known and previously-deemed suspicious Downloadables.
Claim 9
Independent Claim
82 words
A system for determining whether a Downloadable, which is received by a Downloadable engine, is suspicious, comprising: means for monitoring the operating system during runtime for an event caused from a request made by a Downloadable; means for interrupting processing of the request; means for comparing information pertaining to the Downloadable against a predetermined security policy; and means for performing a predetermined responsive action based on the comparison, the predetermined responsive action including storing results of the comparison in an event log.
Claim 10
Independent Claim
82 words
A system for determining whether a Downloadable, which is received by a Downloadable engine, is suspicious, comprising: means for monitoring the operating system during runtime for an event caused from a request made by a Downloadable; means for interrupting processing of the request; means for comparing information pertaining to the Downloadable against a predetermined security policy; and means for performing a predetermined responsive action based on the comparison, the predetermined responsive action including storing results of the comparison in an event log.
Claim 11
Independent Claim
81 words
A system for determining whether a Downloadable, which is received by a Downloadable engine, is suspicious, comprising: means for monitoring the operating system during runtime for an event caused from a request made by a Downloadable; means for interrupting processing of the request; means for comparing information pertaining to the Downloadable against a predetermined security policy; and means for performing a predetermined responsive action based on the comparison, the predetermined responsive action including storing the Downloadable in a suspicious Downloadable database.
Claim 12
Independent Claim
81 words
A system for determining whether a Downloadable, which is received by a Downloadable engine, is suspicious, comprising: means for monitoring the operating system during runtime for an event caused from a request made by a Downloadable; means for interrupting processing of the request; means for comparing information pertaining to the Downloadable against a predetermined security policy; and means for performing a predetermined responsive action based on the comparison, the predetermined responsive action including storing the Downloadable in a suspicious Downloadable database.
Claim 13
Dependent Claim
73 words
A computer-readable storage medium storing program code for causing a computer to perform the steps of: monitoring the operating system during runtime for an event caused from a request made by a Downloadable; interrupting processing of the request; comparing information pertaining to the Downloadable against a predetermined security policy; and performing a predetermined responsive action based on the comparison, the predetermined responsive action including storing results of the comparison in an event log.
Claim 14
Dependent Claim
73 words
A computer-readable storage medium storing program code for causing a computer to perform the steps of: monitoring the operating system during runtime for an event caused from a request made by a Downloadable; interrupting processing of the request; comparing information pertaining to the Downloadable against a predetermined security policy; and performing a predetermined responsive action based on the comparison, the predetermined responsive action including storing results of the comparison in an event log.
Claim 15
Dependent Claim
72 words
A computer-readable storage medium storing program code for causing a computer to perform the steps of: monitoring the operating system during runtime for an event caused from a request made by a Downloadable; interrupting processing of the request; comparing information pertaining to the Downloadable against a predetermined security policy; and performing a predetermined responsive action based on the comparison, the predetermined responsive action including storing the Downloadable in a suspicious Downloadable database.
Claim 16
Dependent Claim
72 words
A computer-readable storage medium storing program code for causing a computer to perform the steps of: monitoring the operating system during runtime for an event caused from a request made by a Downloadable; interrupting processing of the request; comparing information pertaining to the Downloadable against a predetermined security policy; and performing a predetermined responsive action based on the comparison, the predetermined responsive action including storing the Downloadable in a suspicious Downloadable database.
References Cited (Backward Citations)
US5077677A
Cited
US5485409A
Cited
US5359659A
Cited
US5361359A
Cited
US5724425A
Cited
US5720033A
Cited
US5864683A
Cited
US5485575A
Cited
US5638446A
Cited
US5623600A
Cited
US5859966A
Cited
US5572643A
Cited
US5692047A
Cited
US5765205A
Cited
US5761421A
Cited
US5850559A
Cited
US5784459A
Cited
US5692124A
Cited
US5832208A
Cited
US5805829A
Cited
US5740248A
Cited
US5892904A
Cited
US5956481A
Cited
US5796952A
Cited
US5983348A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-12-26 | 2004-06-26 | 2004-12-26 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-12-26 | 2008-06-26 | 2008-12-26 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-12-26 | 2012-06-26 | 2012-12-26 | $7700.00 | Window Closed / Lapsed |