HK1070708A1 - A method of, and system for, heuristically determining that an unknown file is harmless by using traffic heuristics - Google Patents

A method of, and system for, heuristically determining that an unknown file is harmless by using traffic heuristics

Info

Publication number
HK1070708A1
HK1070708A1 HK05102248A HK05102248A HK1070708A1 HK 1070708 A1 HK1070708 A1 HK 1070708A1 HK 05102248 A HK05102248 A HK 05102248A HK 05102248 A HK05102248 A HK 05102248A HK 1070708 A1 HK1070708 A1 HK 1070708A1
Authority
HK
Hong Kong
Prior art keywords
harmless
unknown file
heuristically determining
heuristics
traffic
Prior art date
Application number
HK05102248A
Other languages
English (en)
Inventor
Alexander Shipp
Original Assignee
Messagelabs Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Messagelabs Ltd filed Critical Messagelabs Ltd
Publication of HK1070708A1 publication Critical patent/HK1070708A1/xx

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
    • G06F21/562—Static detection

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Virology (AREA)
  • Health & Medical Sciences (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • General Health & Medical Sciences (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
  • Storage Device Security (AREA)
HK05102248A 2003-04-25 2005-03-15 A method of, and system for, heuristically determining that an unknown file is harmless by using traffic heuristics HK1070708A1 (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
GB0309463A GB2400932B (en) 2003-04-25 2003-04-25 A method of,and system for,heuristically determining that an unknown file is harmless by using traffic heuristics

Publications (1)

Publication Number Publication Date
HK1070708A1 true HK1070708A1 (en) 2005-06-24

Family

ID=33042176

Family Applications (1)

Application Number Title Priority Date Filing Date
HK05102248A HK1070708A1 (en) 2003-04-25 2005-03-15 A method of, and system for, heuristically determining that an unknown file is harmless by using traffic heuristics

Country Status (6)

Country Link
US (1) US20050080816A1 (xx)
EP (1) EP1618447A2 (xx)
AU (1) AU2004235515B2 (xx)
GB (1) GB2400932B (xx)
HK (1) HK1070708A1 (xx)
WO (1) WO2004097602A2 (xx)

Families Citing this family (24)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8239946B2 (en) * 2004-04-22 2012-08-07 Ca, Inc. Methods and systems for computer security
US7680890B1 (en) 2004-06-22 2010-03-16 Wei Lin Fuzzy logic voting method and system for classifying e-mail using inputs from multiple spam classifiers
US8484295B2 (en) 2004-12-21 2013-07-09 Mcafee, Inc. Subscriber reputation filtering method for analyzing subscriber activity and detecting account misuse
US7953814B1 (en) 2005-02-28 2011-05-31 Mcafee, Inc. Stopping and remediating outbound messaging abuse
US9015472B1 (en) 2005-03-10 2015-04-21 Mcafee, Inc. Marking electronic messages to indicate human origination
US8738708B2 (en) 2004-12-21 2014-05-27 Mcafee, Inc. Bounce management in a trusted communication network
US9160755B2 (en) 2004-12-21 2015-10-13 Mcafee, Inc. Trusted communication network
GB0513375D0 (en) 2005-06-30 2005-08-03 Retento Ltd Computer security
US8713686B2 (en) 2006-01-25 2014-04-29 Ca, Inc. System and method for reducing antivirus false positives
US8479174B2 (en) 2006-04-05 2013-07-02 Prevx Limited Method, computer program and computer for analyzing an executable computer file
US8201244B2 (en) 2006-09-19 2012-06-12 Microsoft Corporation Automated malware signature generation
US8959568B2 (en) * 2007-03-14 2015-02-17 Microsoft Corporation Enterprise security assessment sharing
US8413247B2 (en) * 2007-03-14 2013-04-02 Microsoft Corporation Adaptive data collection for root-cause analysis and intrusion detection
US8955105B2 (en) * 2007-03-14 2015-02-10 Microsoft Corporation Endpoint enabled for enterprise security assessment sharing
US20080229419A1 (en) * 2007-03-16 2008-09-18 Microsoft Corporation Automated identification of firewall malware scanner deficiencies
US7882542B2 (en) * 2007-04-02 2011-02-01 Microsoft Corporation Detecting compromised computers by correlating reputation data with web access logs
US10354229B2 (en) 2008-08-04 2019-07-16 Mcafee, Llc Method and system for centralized contact management
GB2463467B (en) * 2008-09-11 2013-03-06 F Secure Oyj Malware detection method and apparatus
US8621625B1 (en) * 2008-12-23 2013-12-31 Symantec Corporation Methods and systems for detecting infected files
US20110069089A1 (en) * 2009-09-23 2011-03-24 Microsoft Corporation Power management for organic light-emitting diode (oled) displays
US8832835B1 (en) * 2010-10-28 2014-09-09 Symantec Corporation Detecting and remediating malware dropped by files
US20120260304A1 (en) 2011-02-15 2012-10-11 Webroot Inc. Methods and apparatus for agent-based malware management
CN102831049B (zh) * 2011-06-13 2015-05-20 腾讯科技（深圳）有限公司 检测软件的方法及系统
GB2532199B (en) * 2014-11-05 2018-10-03 F Secure Corp Determining malware status of file

Family Cites Families (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5617533A (en) * 1994-10-13 1997-04-01 Sun Microsystems, Inc. System and method for determining whether a software package conforms to packaging rules and requirements
US20030033402A1 (en) * 1996-07-18 2003-02-13 Reuven Battat Method and apparatus for intuitively administering networked computer systems
US6357008B1 (en) * 1997-09-23 2002-03-12 Symantec Corporation Dynamic heuristic method for detecting computer viruses using decryption exploration and evaluation phases
US6721721B1 (en) * 2000-06-15 2004-04-13 International Business Machines Corporation Virus checking and reporting for computer database search results
US20040039921A1 (en) * 2000-10-17 2004-02-26 Shyne-Song Chuang Method and system for detecting rogue software
US7281267B2 (en) * 2001-02-20 2007-10-09 Mcafee, Inc. Software audit system
US7080000B1 (en) * 2001-03-30 2006-07-18 Mcafee, Inc. Method and system for bi-directional updating of antivirus database
US7069594B1 (en) * 2001-06-15 2006-06-27 Mcafee, Inc. File system level integrity verification and validation
US7310817B2 (en) * 2001-07-26 2007-12-18 Mcafee, Inc. Centrally managed malware scanning
US7673342B2 (en) * 2001-07-26 2010-03-02 Mcafee, Inc. Detecting e-mail propagated malware
US7421587B2 (en) * 2001-07-26 2008-09-02 Mcafee, Inc. Detecting computer programs within packed computer files
US6792543B2 (en) * 2001-08-01 2004-09-14 Networks Associates Technology, Inc. Virus scanning on thin client devices using programmable assembly language
US7356736B2 (en) * 2001-09-25 2008-04-08 Norman Asa Simulated computer system for monitoring of software performance
US20030070088A1 (en) * 2001-10-05 2003-04-10 Dmitry Gryaznov Computer virus names cross-reference and information method and system
US7340774B2 (en) * 2001-10-15 2008-03-04 Mcafee, Inc. Malware scanning as a low priority task
US7310818B1 (en) * 2001-10-25 2007-12-18 Mcafee, Inc. System and method for tracking computer viruses
US7150042B2 (en) * 2001-12-06 2006-12-12 Mcafee, Inc. Techniques for performing malware scanning of files stored within a file storage device of a computer network
US7096500B2 (en) * 2001-12-21 2006-08-22 Mcafee, Inc. Predictive malware scanning of internet data
US7415726B2 (en) * 2001-12-28 2008-08-19 Mcafee, Inc. Controlling access to suspicious files
US7093121B2 (en) * 2002-01-10 2006-08-15 Mcafee, Inc. Transferring data via a secure network connection
JP3979285B2 (ja) * 2002-12-17 2007-09-19 株式会社日立製作所 情報処理システム
US7257842B2 (en) * 2003-07-21 2007-08-14 Mcafee, Inc. Pre-approval of computer files during a malware detection

Also Published As

Publication number Publication date
WO2004097602A2 (en) 2004-11-11
GB2400932A (en) 2004-10-27
GB2400932B (en) 2005-12-14
US20050080816A1 (en) 2005-04-14
AU2004235515B2 (en) 2008-03-06
WO2004097602A3 (en) 2005-05-12
EP1618447A2 (en) 2006-01-25
AU2004235515A1 (en) 2004-11-11

Similar Documents

Publication Publication Date Title
HK1070708A1 (en) A method of, and system for, heuristically determining that an unknown file is harmless by using traffic heuristics
DE60213507D1 (de) Navigationsgerät, -verfahren und -software
DE60119925D1 (de) Verfahren und kommunikationssystem zur meldung an einem benutzer, und kommunikationssystem damit
DE60114283D1 (de) Vorrichtung zur Abgasreinigung
DE60319140D1 (de) Motorbremsverfahren und -einrichtung
BR0209704B1 (pt) método e conjunto para aumento do volume de cabelos.
DE60310131T8 (de) Vorrichtung zur energieerzeugung von abgaswärme
GB0300613D0 (en) Exhaust aftertreatment device
DE60112754D1 (de) Brennkammerdom und verfahren zu seinem afbau
DE60330925D1 (de) Kommunikationssystem, -gerät und -verfahren
AU2458202A (en) Flare measuring method and flare measuring device, exposure method and exposure system, method of adjusting exposure system
DE50110430D1 (de) Vorrichtung zur Abgasreinigung
ITMI20011809A0 (it) Dispositivo per trattare gas di scarico
IL150546A0 (en) Operating system, kit and method for engine
DE60106126D1 (de) Verfahren und System zur Installation von verfügbaren Netzprotokollen
GB0301846D0 (en) Method for operating an exhaust-gas purification system
DE60114335D1 (de) Abgasschalldämpfer
DE60010454D1 (de) Mobiles wcdma-gerät zur übermittlung von mehrkanaltönen
NO20031739D0 (no) Fremgangsmåte for rensing av plavastatin
DE60112230D1 (de) Kommunikationssystem, -vorrichtung und -verfahren
DE60120206D1 (de) Absorptions-/reduktionskatalysator zur nox-entfernung
DE50200841D1 (de) Abgasschalldämpfer
DE60123557D1 (de) Katalytische vorrichtung zur abgasreinigung
DE60123561D1 (de) Kompressionsmotorbremse und Verfahren
IT1308442B1 (it) Dispositivo per depurare gas di scarico

Legal Events

Date Code Title Description
PC Patent ceased (i.e. patent has lapsed due to the failure to pay the renewal fee)

Effective date: 20200427