WO2012036893A3 - Reputation checking obtained files - Google Patents

Reputation checking obtained files Download PDF

Info

Publication number
WO2012036893A3
WO2012036893A3 PCT/US2011/049807 US2011049807W WO2012036893A3 WO 2012036893 A3 WO2012036893 A3 WO 2012036893A3 US 2011049807 W US2011049807 W US 2011049807W WO 2012036893 A3 WO2012036893 A3 WO 2012036893A3
Authority
WO
WIPO (PCT)
Prior art keywords
file
computing device
reputation
remote
sent
Prior art date
Application number
PCT/US2011/049807
Other languages
French (fr)
Other versions
WO2012036893A2 (en
Inventor
Ritika Virmani
Warren G. Stevens
Jane T. Kim
Sarah J. Bowers
Ryan C. Colvin
John L. Scarrow
Jeffrey R. Mckune
Elliott Jeb Haber
Jess S. Holbrook
Original Assignee
Microsoft Corporation
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Microsoft Corporation filed Critical Microsoft Corporation
Priority to KR1020137006333A priority Critical patent/KR101832533B1/en
Priority to JP2013529178A priority patent/JP5830102B2/en
Priority to EP11825660.1A priority patent/EP2616949A4/en
Publication of WO2012036893A2 publication Critical patent/WO2012036893A2/en
Publication of WO2012036893A3 publication Critical patent/WO2012036893A3/en

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/10—File systems; File servers
    • G06F16/16—File or folder operations, e.g. details of user interfaces specifically adapted to file systems
    • G06F16/164—File meta data generation
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F15/00—Digital computers in general; Data processing equipment in general
    • G06F15/16—Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/552—Detecting local intrusion or implementing counter-measures involving long-term monitoring or reporting
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/01—Input arrangements or combined input and output arrangements for interaction between user and computer
    • G06F3/048—Interaction techniques based on graphical user interfaces [GUI]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/14—Digital output to display device ; Cooperation and interconnection of the display device with other functional units

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Human Computer Interaction (AREA)
  • Data Mining & Analysis (AREA)
  • Databases & Information Systems (AREA)
  • Information Transfer Between Computers (AREA)

Abstract

A Web browser of a computing device downloads or otherwise obtains a file. File information identifying the file is obtained and is sent to a remote reputation service. Client information identifying aspects of the computing device can also optionally be sent to the remote reputation service. In response to the file information (and optionally client information), a reputation indication for the file is received from the remote reputation service. A user interface for the Web browser to present at the computing device is determined, based at least in part on the reputation indication, and presented at the computing device.
PCT/US2011/049807 2010-09-13 2011-08-31 Reputation checking obtained files WO2012036893A2 (en)

Priority Applications (3)

Application Number Priority Date Filing Date Title
KR1020137006333A KR101832533B1 (en) 2010-09-13 2011-08-31 Reputation checking obtained files
JP2013529178A JP5830102B2 (en) 2010-09-13 2011-08-31 Reputation check of acquired file
EP11825660.1A EP2616949A4 (en) 2010-09-13 2011-08-31 Reputation checking obtained files

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US12/880,363 2010-09-13
US12/880,363 US9235586B2 (en) 2010-09-13 2010-09-13 Reputation checking obtained files

Publications (2)

Publication Number Publication Date
WO2012036893A2 WO2012036893A2 (en) 2012-03-22
WO2012036893A3 true WO2012036893A3 (en) 2012-06-14

Family

ID=45380116

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2011/049807 WO2012036893A2 (en) 2010-09-13 2011-08-31 Reputation checking obtained files

Country Status (6)

Country Link
US (1) US9235586B2 (en)
EP (1) EP2616949A4 (en)
JP (1) JP5830102B2 (en)
KR (1) KR101832533B1 (en)
CN (1) CN102306256B (en)
WO (1) WO2012036893A2 (en)

Families Citing this family (32)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9917844B2 (en) 2006-12-17 2018-03-13 Fortinet, Inc. Detection of undesired computer files using digital certificates
US10552701B2 (en) * 2008-02-01 2020-02-04 Oath Inc. System and method for detecting the source of media content with application to business rules
US20090307140A1 (en) * 2008-06-06 2009-12-10 Upendra Mardikar Mobile device over-the-air (ota) registration and point-of-sale (pos) payment
US8776227B1 (en) * 2010-10-21 2014-07-08 Symantec Corporation User interface based malware detection
US9264235B2 (en) * 2010-11-16 2016-02-16 Blackberry Limited Apparatus, system and method for verifying server certificates
US9152791B1 (en) * 2011-05-11 2015-10-06 Trend Micro Inc. Removal of fake anti-virus software
US8862767B2 (en) 2011-09-02 2014-10-14 Ebay Inc. Secure elements broker (SEB) for application communication channel selector optimization
US8856930B2 (en) * 2012-03-30 2014-10-07 F-Secure Corporation Download control
US9430640B2 (en) * 2012-09-28 2016-08-30 Intel Corporation Cloud-assisted method and service for application security verification
GB2507574B (en) * 2012-11-06 2015-05-27 F Secure Corp Malicious object detection
US9075988B2 (en) * 2012-12-28 2015-07-07 Lenovo Enterprise Solutions (Singapore) Pte. Ltd. Inferring security decisions from trusted users
CN105659554A (en) * 2013-09-29 2016-06-08 迈克菲公司 Prevalence-based reputations
US9237161B2 (en) * 2013-12-16 2016-01-12 Morphick, Inc. Malware detection and identification
WO2015099756A1 (en) * 2013-12-27 2015-07-02 Mcafee, Inc. Frequency-based reputation
US9258318B2 (en) * 2014-02-12 2016-02-09 Symantec Corporation Systems and methods for informing users about applications available for download
US9917851B2 (en) 2014-04-28 2018-03-13 Sophos Limited Intrusion detection using a heartbeat
US10122753B2 (en) 2014-04-28 2018-11-06 Sophos Limited Using reputation to avoid false malware detections
US9398036B2 (en) * 2014-09-17 2016-07-19 Microsoft Technology Licensing, Llc Chunk-based file acquisition and file reputation evaluation
GB201915196D0 (en) 2014-12-18 2019-12-04 Sophos Ltd A method and system for network access control based on traffic monitoring and vulnerability detection using process related information
US10083295B2 (en) * 2014-12-23 2018-09-25 Mcafee, Llc System and method to combine multiple reputations
CA2951256C (en) * 2015-12-08 2021-03-16 Lavasoft Software Canada Inc. Systems and methods for harmful file rating and screening in online file transfers
US10476894B2 (en) * 2016-02-17 2019-11-12 Sophos Limited Evaluating installers and installer payloads
US10397193B2 (en) * 2016-07-11 2019-08-27 Sonicwall Inc. Blind cloud data leak protection
US10733301B2 (en) * 2016-08-24 2020-08-04 Microsoft Technology Licensing, Llc Computing device protection based on device attributes and device risk factor
CN106411871A (en) * 2016-09-20 2017-02-15 东软集团股份有限公司 Method and device for building application credit library
CN111930689A (en) * 2016-12-26 2020-11-13 华为技术有限公司 Data query method and query client
CN108932236B (en) * 2017-05-22 2021-05-07 北京金山云网络技术有限公司 File management method and device
US10489593B2 (en) * 2017-06-27 2019-11-26 Symantec Corporation Mitigation of malicious actions associated with graphical user interface elements
US10586038B2 (en) 2017-09-08 2020-03-10 Qualcomm Incorporated Secure stack overflow protection via a hardware write-once register
KR102510846B1 (en) * 2018-10-04 2023-03-16 삼성전자주식회사 Electronic apparatus and controlling method thereof
CN111611585A (en) * 2020-05-20 2020-09-01 网神信息技术（北京）股份有限公司 Terminal device monitoring method and device, electronic device and medium
CN114390039A (en) * 2021-11-30 2022-04-22 航天信息股份有限公司 File uploading and downloading method and system

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2009094086A2 (en) * 2008-01-23 2009-07-30 Microsoft Corporation A feedback augmented object reputation service
US20090204542A1 (en) * 2008-02-11 2009-08-13 Novell, Inc. Privately sharing relying party reputation with information card selectors
US20090271428A1 (en) * 2007-05-09 2009-10-29 The Go Daddy Group, Inc. Tracking digital identity related reputation data
US20100005291A1 (en) * 2008-04-16 2010-01-07 Microsoft Corporation Application reputation service

Family Cites Families (37)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US83731A (en) 1868-11-03 Edward y
US8117644B2 (en) * 2000-01-07 2012-02-14 Pennar Software Corporation Method and system for online document collaboration
AU2001242763A1 (en) * 2000-03-24 2001-10-03 Optim Corporation Advertising system
GB2386802A (en) 2002-03-18 2003-09-24 Hewlett Packard Co Auditing of secure communication sessions over a communication network
US7624421B2 (en) * 2003-07-31 2009-11-24 Microsoft Corporation Method and apparatus for managing and displaying contact authentication in a peer-to-peer collaboration system
US8554601B1 (en) * 2003-08-22 2013-10-08 Amazon Technologies, Inc. Managing content based on reputation
US20050198181A1 (en) 2004-03-02 2005-09-08 Jordan Ritter Method and apparatus to use a statistical model to classify electronic communications
AU2005248858B8 (en) 2004-05-25 2011-05-26 Google Llc Electronic message source reputation information system
US10043008B2 (en) 2004-10-29 2018-08-07 Microsoft Technology Licensing, Llc Efficient white listing of user-modifiable files
US20060095404A1 (en) 2004-10-29 2006-05-04 The Go Daddy Group, Inc Presenting search engine results based on domain name related reputation
WO2006094275A2 (en) 2005-03-02 2006-09-08 Markmonitor, Inc. Trust evaluation systems and methods
US7610273B2 (en) 2005-03-22 2009-10-27 Microsoft Corporation Application identity and rating service
US7562304B2 (en) 2005-05-03 2009-07-14 Mcafee, Inc. Indicating website reputations during website manipulation of user information
US8566726B2 (en) 2005-05-03 2013-10-22 Mcafee, Inc. Indicating website reputations based on website handling of personal information
US7774413B2 (en) 2005-08-30 2010-08-10 Microsoft Corporation Email message hygiene stamp
US7522088B2 (en) * 2005-10-31 2009-04-21 Passur Aerospace, Inc. System and method for monitoring airspace
US20070255702A1 (en) * 2005-11-29 2007-11-01 Orme Gregory M Search Engine
US7415448B2 (en) * 2006-03-20 2008-08-19 Microsoft Corporation Adaptive engine for processing geographic data
US7761912B2 (en) 2006-06-06 2010-07-20 Microsoft Corporation Reputation driven firewall
US20080005223A1 (en) 2006-06-28 2008-01-03 Microsoft Corporation Reputation data for entities and data processing
US20080152082A1 (en) * 2006-08-16 2008-06-26 Michel Bouchard Method and apparatus for use in security screening providing incremental display of threat detection information and security system incorporating same
US8312536B2 (en) * 2006-12-29 2012-11-13 Symantec Corporation Hygiene-based computer security
US20080209031A1 (en) * 2007-02-22 2008-08-28 Inventec Corporation Method of collecting and managing computer device information
US8301901B2 (en) 2007-03-06 2012-10-30 Emc Corporation System and method for expressing and evaluating signed reputation assertions
US20080288330A1 (en) * 2007-05-14 2008-11-20 Sailpoint Technologies, Inc. System and method for user access risk scoring
US9378373B2 (en) 2007-09-24 2016-06-28 Symantec Corporation Software publisher trust extension application
US20090164994A1 (en) * 2007-12-20 2009-06-25 Virtual Computer, Inc. Virtual computing management systems and methods
US8146151B2 (en) * 2008-02-27 2012-03-27 Microsoft Corporation Safe file transmission and reputation lookup
US20090292930A1 (en) * 2008-04-24 2009-11-26 Marano Robert F System, method and apparatus for assuring authenticity and permissible use of electronic documents
US8595282B2 (en) * 2008-06-30 2013-11-26 Symantec Corporation Simplified communication of a reputation score for an entity
CN101556710B (en) * 2009-01-22 2010-12-01 上海国际港务（集团）股份有限公司 Global tracking management method of container and electronic device and reading-writing device for implementing same
US8001606B1 (en) * 2009-06-30 2011-08-16 Symantec Corporation Malware detection using a white list
US8800030B2 (en) * 2009-09-15 2014-08-05 Symantec Corporation Individualized time-to-live for reputation scores of computer files
CA2783988A1 (en) * 2009-11-11 2011-05-19 Lifestream Corporation Wireless device emergency services connection and panic button, with crime and safety information system
US8627063B2 (en) * 2009-12-23 2014-01-07 Citrix Systems, Inc. Systems and methods for flash crowd control and batching OCSP requests via online certificate status protocol
US8813232B2 (en) * 2010-03-04 2014-08-19 Mcafee Inc. Systems and methods for risk rating and pro-actively detecting malicious online ads
US8863291B2 (en) 2011-01-20 2014-10-14 Microsoft Corporation Reputation checking of executable programs

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090271428A1 (en) * 2007-05-09 2009-10-29 The Go Daddy Group, Inc. Tracking digital identity related reputation data
WO2009094086A2 (en) * 2008-01-23 2009-07-30 Microsoft Corporation A feedback augmented object reputation service
US20090204542A1 (en) * 2008-02-11 2009-08-13 Novell, Inc. Privately sharing relying party reputation with information card selectors
US20100005291A1 (en) * 2008-04-16 2010-01-07 Microsoft Corporation Application reputation service

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP2616949A4 *

Also Published As

Publication number Publication date
KR20130105627A (en) 2013-09-25
EP2616949A2 (en) 2013-07-24
CN102306256A (en) 2012-01-04
KR101832533B1 (en) 2018-02-26
US9235586B2 (en) 2016-01-12
CN102306256B (en) 2016-02-03
EP2616949A4 (en) 2017-03-15
JP2013537342A (en) 2013-09-30
WO2012036893A2 (en) 2012-03-22
US20120066346A1 (en) 2012-03-15
JP5830102B2 (en) 2015-12-09

Similar Documents

Publication Publication Date Title
WO2012036893A3 (en) Reputation checking obtained files
WO2012012670A3 (en) Measuring actual end user performance and availability of web applications
WO2014031746A3 (en) Predictive caching for content
GB2509036A (en) Providing a network-accessible malware analysis
WO2012092271A3 (en) Supporting intelligent user interface interactions
WO2009105321A3 (en) Associating network devices with users
WO2014199233A3 (en) Digital marketing application for electronic cigarette users
EP2372973A3 (en) Updates with context information
WO2012024421A3 (en) Selecting and processing offers to complete tasks, research programs, and consumer rewards programs based on location
AU2014346473A8 (en) Document management and collaboration system
MX352777B (en) Predicted-location notification.
IN2014MN01054A (en)
WO2012030793A3 (en) Providing results to parameterless search queries
WO2011103429A3 (en) System and method for improving internet search results using telecommunications data
WO2012088483A3 (en) Application reporting in an application-selectable user interface
WO2012047036A3 (en) Apparatus and method for adaptive gesture recognition in portable terminal
WO2012078659A3 (en) Correlating user interactions with interfaces
WO2012088086A3 (en) View dependent techniques to determine user interest in a feature in a 3d application
GB201100039D0 (en) Server, user device and malware detection method thereof
WO2012172430A3 (en) Method of and apparatus for providing an indication of data consumption
IN2015DN01139A (en)
WO2011019526A3 (en) Separating reputation of users in different roles
EP2228761A3 (en) Providing permission to perform action on an electronic ticket
WO2012018512A3 (en) Late resource localization binding for web services
GB2476192A (en) Portable management device

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 11825660

Country of ref document: EP

Kind code of ref document: A2

WWE Wipo information: entry into national phase

Ref document number: 2011825660

Country of ref document: EP

ENP Entry into the national phase

Ref document number: 20137006333

Country of ref document: KR

Kind code of ref document: A

ENP Entry into the national phase

Ref document number: 2013529178

Country of ref document: JP

Kind code of ref document: A

NENP Non-entry into the national phase

Ref country code: DE