System and method for protecting a networked computer from viruses

• US 20020035696A1
• Filed: 06/07/2001
• Published: 03/21/2002
• Est. Priority Date: 06/09/2000
• Status: Abandoned Application

• Current Assignee: ZF Micro Solutions, Inc.
• Original Assignee: ZF Micro Solutions, Inc.
• Inventors: Thacker, Will
• Application Number:
  US09/876,863
• Publication Number:
  US 20020035696A1
• Time in Patent Office: Days
• US Class Current: 713/200
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: G06F 21/567 using dedicated hardware
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 63/1491 using deception as countermeasure, e.g. honeypots, honeynets, decoys or entrapment

Abstract

System and method in which a virus trap is connected between a computer and a network to prevent a virus from entering the computer from the network.

Claims

1. A virus trap adapted to be connected between a computer and a network to prevent a virus from entering the computer from the network.

2. The virus trap of claim 1 wherein the virus trap includes means for intercepting incoming data that attempts to execute.

3. The virus trap of claim 1 wherein the virus trap comprises a computer virus trap which thwarts attempts to execute anything other than its own algorithms.

4. The virus trap of claim 1 wherein the virus trap includes means for detecting and trapping executable programs and email attachments.

5. The virus trap of claim 1 wherein the virus trap includes sacrificial data which can be destroyed by a virus from the network, and means for reporting the destruction of the data to the computer.

6. A system comprising a computer, a network, and a virus trap connected between the computer and the network to prevent a virus from entering the computer from the network.

7. The system of claim 6 wherein the virus trap includes means for intercepting incoming data that attempts to execute.

8. The system of claim 6 wherein the virus trap comprises a computer system which thwarts attempts to execute anything other than its own algorithms.

9. The system of claim 6 wherein the virus trap includes means for detecting and trapping executable programs and email attachments.

10. The system of claim 6 wherein the virus trap includes sacrificial data which can be destroyed by a virus from the network, and means for reporting the destruction of the data to the computer.

11. The system of claim 6 together with a separate computer connected to the network for testing executable programs which are intentionally downloaded from the network.

13. The method of claim 12 wherein the virus trap intercepts incorming data that attempts to execute.

14. The method of claim 12 wherein the virus trap comprises a computer system which thwarts attempts to execute anything other than its own algorithms.

15. The method of claim 12 wherein the virus trap detects and traps executable programs and email attachments.

16. The method of claim 12 wherein the virus trap allows sacrificial data which to be destroyed by a virus from the network, and then reports the destruction of the data to the computer.

17. The method of claim 12 further including the steps of connecting a separate computer to the network, and testing executable programs which are intentionally downloaded from the network in the separate computer.

12. In a method of protecting a computer against viruses from a network, the step of:

connecting a virus trap between the computer and the network to prevent a virus from entering the computer from the network.