Data transfer security
AssigneeKidaro Inc.
InventorRon Kohavi
Life of this patent
Estimating the term…
Abstract
An apparatus for protecting against computer malware, comprising: a data inputter for intercepting data units flow, a trust level assigner, associated with the data inputter, for assigning to each of the data units a respective trust level, an isolated-processing environment, operable to process the data units in an isolated manner and configured to send copies of the processed data units out of the isolated-processing environment, and a processing environment selector, associated with the trust level assigner and the isolated-processing environment, operable to determine if a data unit is to be executed on the isolated-processing environment, in accordance with the respective trust level.
Claims56
Apparatus for protecting against computer malicious software (malware), comprising:
- a data inputter for intercepting data units flow;
- a trust level assigner, associated with said data inputter, for assigning to each of said data units a respective trust level;
- an isolated-processing environment, operable to process said data units in an isolated manner and configured to send copies of the processed data units out of said isolated-processing environment;
- and
- a processing environment selector, associated with said trust level assigner and said isolated-processing environment, operable to determine if a data unit is to be executed on said isolated-processing environment, in accordance with said respective trust level.
System for protecting against computer malware, components comprising:
- a data inputter for intercepting data units flow;
- a trust level assigner, associated with said data inputter, for assigning each of said data units a respective trust level;
- an isolated-processing environment, operable to process said data units in an isolated manner and configured to send copies of the processed data units out of said isolated-processing environment;
- at least one end-point system for processing said data units, in a non-isolated manner;
- at least one end-point agent, each residing on a respective end point system, and associated with said isolated processing environment, and operable to provide said isolated-processing environment with information for controlling the processing of said data units on said isolated-processing environment;
- and
- a processing environment selector, associated with said trust level assigner, with said isolated-processing environment, and with said end-point system, and operable to select between said isolated-processing environment and said end-point system for data unit execution, in accordance with said respective trust level.
Method for protecting against computer malware, comprising:
- receiving transferred data units;
- analyzing said data units;
- assigning to each of said data units a respective trust level;
- determining for each of said data units if it should be executed in an isolated manner, in accordance with said assigned respective trust level;
- processing data units determined to be executed in an isolated manner on said isolated-processing environment;
- and
- sending copies of the processed data units out of said isolated-processing environment.
Method for protecting against computer malware, comprising:
- converting a data unit into an unexecutable format;
- sending said data unit to an end-point system;
- enabling a user on said end-point system to assign said data unit a respective trust level;
- and
- enabling the user on said end-point system to trigger conversion of said data unit into an executable format, according to said trust level.
Method for protecting against computer malware, comprising:
- converting a data unit into an unexecutable format;
- sending said data unit to an end-point system;
- assigning said data unit a respected trust level;
- and
- converting said data unit into executable format according to said trust level.
Dependencies are inferred from the claim text.