Methods and interfaces for executable code analysis

• US 20080222728A1
• Filed: 03/05/2007
• Published: 09/11/2008
• Est. Priority Date: 03/05/2007
• Status: Abandoned Application

• Current Assignee: Joel Michael Murphy
• Original Assignee: Joel Michael Murphy
• Inventors: Murphy, Daniel Leo, Chavez, Paula Natasha
• Application Number:
  US11/713,714
• Publication Number:
  US 20080222728A1
• Time in Patent Office: Days
• US Class Current: 726/24
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 51/08 Annexed information, e.g. attachments
• CPC Class Codes: H04L 51/18 Commands or executable codes
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection

Abstract

Described are methods of a server and for processing an email message. Also described are user interfaces. A user may forward unopened email message and/or URLs to a service provider for analysis of whether the unopened email message or URL is configured to download executable code. The service provider may operate with a server. The server may determine if executable code is present in the email message and/or is downloadable via a website. The executable code may be determined to be malicious. It is also described that after a service provider has determined whether the email message and/or the URL is configured to download malicious executable code, the user can receive an indication to that effect from the server.

Claims

1. A method of processing an email message, comprising:

receiving an unopened email message in an email account;

selecting the unopened email message to forward the email message unopened; and

forwarding the unopened email message to a server for analysis as to whether it contains executable code.

3. The method of claim 1, wherein forwarding the unopened email message to a server for analysis, comprises:

forwarding a copy of the unopened email message to the server.

4. The method of claim 1, further comprising:

receiving by the server an unopened email message forwarded from the email account;

opening the email message to determine the content of the email message; and

determining whether the content of the email message contains executable code.

5. The method of claim 4, further comprising:

processing the executable code to determine whether the executable code type is of a malicious type.

6. The method of claim 4, further comprising:

following a link within the email message to determine whether the content of the email message contains executable code.

7. The method of claim 6, further comprising:

processing the executable code to determine whether the executable code type is of a malicious type.

8. The method claim 1, further comprising:

transmitting an alert message to indicate whether the forwarded unopened email message contained executable code.

2. The method of claim 2, wherein forwarding the unopened email message to a server for analysis, comprises:

automatically forwarding the unopened email message to a server for analysis.

9. An email account user interface, comprising:

indicia indicating a received unopened email message;

selection option indicia to mark the received unopened email message; and

forwarding indicia on the user interface for forwarding a marked unopened email message to a server to determine whether the content of the forwarded unopened email message contains executable code.

10. An interface of claim 9, wherein the forwarding indicia on the user interface is for forwarding a copy of a marked unopened email message to the server.

11. An interface of claim 9, wherein the forwarding indicia on the user interface for forwarding a marked unopened email message to a server is to determine whether the content of the email message contains malicious executable code.

12. An interface of claim 9, further comprising:

an executable code alert indicator configured to indicate whether the forwarded unopened email message contained executable code.

13. A method of processing URL, comprising:

receiving on a communication device an unopened email including a URL;

opening the unopened email to reveal the URL;

indicating a URL to be transmitted via a user interface associated with a communication device without accessing the URL; and

forwarding the URL to a server to determine whether a website associated with the URL is configured to download malicious executable code.

14. The method of claim 13, further comprising:

receiving an alert message from the server indicate whether the forwarded unopened email message contained executable code.

15. The method of claim 13, wherein forwarding is performed automatically.

16. The method of claim 13, further comprising:

receiving by a server the URL to a website forwarded from a user associated with a remote communication device;

following a link of the URL to the website; and

determining whether the website is configured to download executable code.

17. The method of claim 16, further comprising:

transmitting an alert message to the user associated with the remote communication device to indicate whether the website of the URL contained executable code.

18. The method of claim 16, further comprising:

processing the executable code to determine whether the executable code type is of a malicious type.