Back to results
US 2018/0007068 A1Published application
System and method to detect bypass of a sandbox application
AssigneeMcAfee, Inc.
InventorsXiaoning Li, Haifei Li, Bing Sun, Lu Deng
Life of this patent
Estimating the term…
Loading patent…
Loading patent…
AssigneeMcAfee, Inc.
InventorsXiaoning Li, Haifei Li, Bing Sun, Lu Deng
Estimating the term…
Particular embodiments described herein provide for an electronic device that can be configured to receive data related to execution of a sandboxed process, determine if a high privileged process was created by the sandboxed process, and block the sandboxed process from executing if the high privileged process was created by the sandboxed process and the data indicates the sandboxed process is attempting a sandbox bypass attack. In an example, the high privileged process was created by the sandboxed process if a resource folder is associated with a sandbox folder. In another example, the high privileged process was created by the sandboxed process if a resource folder was created by a broker process in response to a request by the sandboxed process.
At least one machine readable medium comprising one or more instructions that when executed by at least one processor, cause the at least processor to:
An apparatus comprising:
A method comprising:
A system for detecting bypass of a sandbox, the system comprising:
Dependencies are inferred from the claim text.