WO2001057629A3 - Computer security system indentifying suspect behaviour - Google Patents

Computer security system indentifying suspect behaviour Download PDF

Info

Publication number
WO2001057629A3
WO2001057629A3 PCT/US2001/003842 US0103842W WO0157629A3 WO 2001057629 A3 WO2001057629 A3 WO 2001057629A3 US 0103842 W US0103842 W US 0103842W WO 0157629 A3 WO0157629 A3 WO 0157629A3
Authority
WO
WIPO (PCT)
Prior art keywords
security system
indentifying
computer security
suspect behaviour
suspect
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/US2001/003842
Other languages
French (fr)
Other versions
WO2001057629A9 (en
WO2001057629A2 (en
Inventor
Kelly M Jones
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Panacya Inc
Original Assignee
Panacya Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Panacya Inc filed Critical Panacya Inc
Priority to EP01912701A priority Critical patent/EP1410129A2/en
Priority to AU2001241454A priority patent/AU2001241454A1/en
Publication of WO2001057629A2 publication Critical patent/WO2001057629A2/en
Publication of WO2001057629A3 publication Critical patent/WO2001057629A3/en
Anticipated expiration legal-status Critical
Publication of WO2001057629A9 publication Critical patent/WO2001057629A9/en
Ceased legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/554—Detecting local intrusion or implementing counter-measures involving event detection and direct action
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
    • G06F21/566—Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Virology (AREA)
  • Storage Device Security (AREA)

Abstract

A behaviorally-based computer security system is provided. The system protects a data-processing system against viruses or other harmful computer programs, requests or instructions without requiring constant updates. The system also protects against newly-created viruses.
PCT/US2001/003842 2000-02-07 2001-02-07 Computer security system indentifying suspect behaviour Ceased WO2001057629A2 (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP01912701A EP1410129A2 (en) 2000-02-07 2001-02-07 Computer security system identifying suspect behavior
AU2001241454A AU2001241454A1 (en) 2000-02-07 2001-02-07 Computer security system indentifying suspect behaviour

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US49949400A 2000-02-07 2000-02-07
US09/499,494 2000-02-07

Publications (3)

Publication Number Publication Date
WO2001057629A2 WO2001057629A2 (en) 2001-08-09
WO2001057629A3 true WO2001057629A3 (en) 2002-03-21
WO2001057629A9 WO2001057629A9 (en) 2002-10-31

Family

ID=23985471

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2001/003842 Ceased WO2001057629A2 (en) 2000-02-07 2001-02-07 Computer security system indentifying suspect behaviour

Country Status (3)

Country Link
EP (1) EP1410129A2 (en)
AU (1) AU2001241454A1 (en)
WO (1) WO2001057629A2 (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7552473B2 (en) * 2003-08-12 2009-06-23 Symantec Corporation Detecting and blocking drive sharing worms
KR100897849B1 (en) 2007-09-07 2009-05-15 한국전자통신연구원 Abnormal process detection method and device

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1997000483A1 (en) * 1995-06-15 1997-01-03 Fraudetect, L.L.C. Process and apparatus for detecting fraud
US5740441A (en) * 1994-12-20 1998-04-14 Sun Microsystems, Inc. Bytecode program interpreter apparatus and method with pre-verification of data type restrictions and object initialization
WO1998045778A2 (en) * 1997-04-08 1998-10-15 Marc Zuta Antivirus system and method

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5740441A (en) * 1994-12-20 1998-04-14 Sun Microsystems, Inc. Bytecode program interpreter apparatus and method with pre-verification of data type restrictions and object initialization
WO1997000483A1 (en) * 1995-06-15 1997-01-03 Fraudetect, L.L.C. Process and apparatus for detecting fraud
WO1998045778A2 (en) * 1997-04-08 1998-10-15 Marc Zuta Antivirus system and method

Also Published As

Publication number Publication date
EP1410129A2 (en) 2004-04-21
WO2001057629A9 (en) 2002-10-31
AU2001241454A1 (en) 2001-08-14
WO2001057629A2 (en) 2001-08-09

Similar Documents

Publication Publication Date Title
AU2001245444A1 (en) Computer security system
WO2003073580A3 (en) Processing system for a power distribution system
MXPA02011835A (en) Data protection system that protects data by encrypting the data.
EP1303097A3 (en) Virtual distributed security system
AU6493900A (en) Currency handling system employing an infrared authenticating system
AU2002210450A1 (en) Maintaining virus detection software
HU0200434D0 (en) Method to determine which requirements from a general requirements document apply to a specific situation, computer system for operating the method and computer-readable medium containing instructions for...
AU2002259323A1 (en) Active transaction generation, processing, and routing system
AU2618400A (en) Document localization, management and delivery system
WO2000074967A3 (en) Method for operating a transmission device
NO305420B1 (en) Device by computer communication system, especially by communication through firewalls
WO2003005627A3 (en) Mobile application access control list security system
AU3266900A (en) Computer security system
AU2621301A (en) Computer generated poetry system
AU4943700A (en) Computer software management system
AU6882098A (en) Attenuated respiratory syncytial virus
AU2002336004A1 (en) Process for the management of an extractive distillation plant, process control system and extractive distillation plant
AU4438300A (en) System for transferring fluids and methods for installing, modifying and operating the system
AU7257101A (en) Influenza virus binding, sialylated oligosaccharide substance and use thereof
AU2001225366A1 (en) Computer security system
AU2001248739A1 (en) Computer entertainment system using computer network, program for the computer entertainment system
WO2004055640A3 (en) System and method for storing and accessing secure data
AU2001241486A1 (en) System including cpu and code translator for translating code from a second instruction set to a first instruction set executable by the cpu
AU4397600A (en) Schutzschaltung fur aktive bauelemente gegen uber- bzw. unterspannung
AU2065901A (en) Systems, methods and devices for trusted transactions

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A2

Designated state(s): AU JP

AL Designated countries for regional patents

Kind code of ref document: A2

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
AK Designated states

Kind code of ref document: A3

Designated state(s): AU JP

AL Designated countries for regional patents

Kind code of ref document: A3

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR

AK Designated states

Kind code of ref document: C2

Designated state(s): AU JP

AL Designated countries for regional patents

Kind code of ref document: C2

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR

COP Corrected version of pamphlet

Free format text: PAGES 1/8-8/8, DRAWINGS, REPLACED BY NEW PAGES 1/8-8/8; DUE TO LATE TRANSMITTAL BY THE RECEIVING OFFICE

WWE Wipo information: entry into national phase

Ref document number: 2001912701

Country of ref document: EP

WWP Wipo information: published in national office

Ref document number: 2001912701

Country of ref document: EP

NENP Non-entry into the national phase

Ref country code: JP

WWW Wipo information: withdrawn in national office

Ref document number: 2001912701

Country of ref document: EP