MULTI-NETWORK VIRUS IMMUNIZATION

• US 20160197940A1
• Filed: 01/11/2016
• Published: 07/07/2016
• Est. Priority Date: 04/27/2006
• Status: Abandoned Application

• Current Assignee: Searete LLC (Intellectual Ventures LLC)
• Original Assignee: Searete LLC (Intellectual Ventures LLC)
• Inventors: Jung, Edward K.Y., Levien, Royce A., Lord, Robert W., Malamud, Mark A., Rinaldo, John D., Wood, Lowell L. Jr.
• Application Number:
  US14/992,841
• Publication Number:
  US 20160197940A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

An apparatus, device, methods, computer program product, and system are described that determine a virus associated with a communications network, and distribute an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one of a higher transmission speed, a higher transmission reliability, a higher transmission security, and/or a physically-separate transmission path, relative to transmission of the virus on the communications network.

Claims

1-70. -70. (canceled)

71. A system comprising:

circuitry for determining a virus associated with a communications network; and

circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus.

72. The system of claim 71 wherein the circuitry for determining a virus associated with a communications network comprises:

at least one of;

circuitry for detecting a propagation of the virus between network devices of the communications network;

or

circuitry for determining a potential for propagation of the virus on the communications network.

73. The system of claim 71 wherein the circuitry for determining a virus associated with a communications network comprises:

circuitry for determining a feature of the communications network that is susceptible to the virus; and

circuitry for determining the virus, based on the feature.

74. The system of claim 71 wherein the circuitry for determining a virus associated with a communications network comprises:

circuitry for determining a feature of a network device of the communications network susceptible to the virus; and

circuitry for determining the virus, based on the feature.

75. The system of claim 71 wherein the circuitry for determining a virus associated with a communications network comprises:

circuitry for determining the virus, the virus including code associated with at least one of;

a network virus, a denial of service attack, a network flooding, a worm, a Trojan horse, spyware, an unauthorized network program, spam, or adware.

76. The system of claim 71, wherein the circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus comprises:

circuitry for distributing the anti-viral agent onto the communications network via a bypass network that provides at least a physically-separate transmission path relative to transmission of the virus on the communications network.

77. The system of claim 76, wherein the circuitry for distributing the anti-viral agent onto the communications network via a bypass network that provides at least a physically-separate transmission path relative to transmission of the virus on the communications network comprises:

circuitry for distributing the anti-viral agent onto the communications network via a bypass network that provides at least a physically-separate transmission path that includes at least one of a device, a router, a switch, or a physical link that are not part of the communications network.

78. The system of claim 71, wherein the circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus comprises:

circuitry for distributing the anti-viral agent onto the communications network via a bypass network that provides at least a logically-separate transmission path relative to transmission of the virus on the communications network.

79. The system of claim 78, wherein the circuitry for distributing the anti-viral agent onto the communications network via a bypass network that provides at least a logically-separate transmission path relative to transmission of the virus on the communications network comprises:

circuitry for distributing the anti-viral agent onto the communications network via a bypass network that provides at least a logically-separate transmission path that includes at least one network device that is part of the communications network, wherein the at least one network device is associated with at least one of a network address, a network protocol, an instance of a network protocol, or a protocol stack layer that is associated with network traffic on the communications network and wherein the at least one network device is further associated with at least one of another network address, another network protocol, another instance of a network protocol, or another protocol stack layer that is associated with network traffic on the bypass network.

80. The system of claim 71, wherein the circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus comprises:

circuitry for selecting an anti-viral agent for distribution that is configured to at least partially starve propagation of the virus by being competitive with the virus for one or more resources of the communications network that are useable in propagation of the virus.

81. The system of claim 71, wherein the circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus comprises:

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network at least in part via one or more multicast transmissions of the anti-viral agent to one or more devices of the communications network.

82. The system of claim 71, wherein the circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus comprises:

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network at least in part via one or more broadcast transmissions of the anti-viral agent to one or more devices of the communications network.

83. The system of claim 71, wherein the circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus comprises:

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network at least in part via one or more targeted transmissions of the anti-viral agent to one or more devices of the communications network that have been determined to be have a likelihood of at least one of receiving or being susceptible to the virus.

84. The system of claim 71, wherein the circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus comprises:

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network at least in part via one or more targeted transmissions of the anti-viral agent to one or more devices of the communications network that have been determined to be have a high degree of network connectivity to one or more other devices of the communications network.

85. The system of claim 71, wherein the circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus comprises:

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, using a network traffic management device that is configured to manage competitive propagation of the anti-viral agent with respect to the virus.

86. The system of claim 71, wherein the circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus comprises:

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, using a network traffic management device that is configured to implement one or more rules governing the distribution of the anti-viral agent onto the communications network.

87. The system of claim 86 wherein the circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, using a network traffic management device that is configured to implement one or more rules governing the distribution of the anti-viral agent onto the communications network comprises:

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, using a network traffic management device that is operable to implement one or more rules for buffering the virus within one or more devices to hinder propagation of the virus.

88. The system of claim 86 wherein the circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, using a network traffic management device that is configured to implement one or more rules governing the distribution of the anti-viral agent onto the communications network comprises:

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, using a network traffic management device that is operable to implement one or more rules for at least one of prohibiting, delaying, or impeding the transmission of at least some communications data on the communications network until at least some of the anti-viral agent has been transmitted via the bypass network.

89. The system of claim 71, wherein the circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus comprises:

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, using a network traffic management device that is operable to prioritize transmission of the anti-viral agent with respect to communications data of the communications network at least in part by prioritizing tagged network traffic that is associated with the anti-viral agent.

90. The system of claim 71, wherein the circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus comprises:

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, using a network traffic management device that is operable to at least one of suppress or delay transmission of the virus relative to transmission of the anti-viral agent.

91. The system of claim 90, wherein the circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, using a network traffic management device that is operable to at least one of suppress or delay transmission of the virus relative to transmission of the anti-viral agent comprises:

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, using a network traffic management device that is operable to utilize at least one or more infinite loops within the communications network to at least one of suppress or delay transmission of the virus relative to transmission of the anti-viral agent.

92. The system of claim 71, wherein the circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus comprises:

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, wherein the bypass network is configured to provide a faster end-to-end transmission of the anti-viral agent to the at least one non-infected device than the communications network.

93. The system of claim 92, wherein the circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, wherein the bypass network is configured to provide a faster end-to-end transmission of the anti-viral agent to the at least one non-infected device than the communications network comprises:

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, wherein the bypass network is configured to provide at least an end-to-end transmission path of the anti-viral agent to the at least one non-infected device that includes fewer point-to-point transmissions as compared to the communications network.

94. The system of claim 92, wherein the circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, wherein the bypass network is configured to provide a faster end-to-end transmission of the anti-viral agent to the at least one non-infected device than the communications network comprises:

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network using a transmission path to the at least one non-infected device that bypasses at least one of a switch, a router, or a physical link of the communications network and that includes at least one intermediary network server that has high connectivity to other devices that include at least the infected device.

95. The system of claim 71, wherein the circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus comprises:

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, the bypass network including at least one of;

a virtual local area network, a virtual private network, a peer-to-peer network, or an intranet.

96. The system of claim 71, wherein the circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus comprises:

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, the bypass network including at least one of;

a satellite network, a satellite radio network, a cellular network, or a paging network.

97. The system of claim 71, wherein the circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus comprises:

at least one of;

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission reliability, wherein the bypass network is configured to provide a more reliable point-to-point transmission of the anti-viral agent to the at least one non-infected device than the communications network;

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission reliability wherein the bypass network is configured to provide a more reliable end-to-end transmission of the anti-viral agent to the at least one non-infected device than the communications network;

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, wherein the bypass network is configured to provide a transmission of the anti-viral agent to the at least one non-infected device with a greater quality of service (QoS) than the communications network;

or

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, wherein the bypass network is configured to provide a transmission of the anti-viral agent to the at least one non-infected device with at least one of;

a lesser number of dropped packets, a shorter delay, a lesser likelihood of out-of-order delivery, or fewer errors than the communications network.

98. The system of claim 71, wherein the circuitry for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the circuitry for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus comprises:

at least one of;

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, wherein the bypass network is configured to provide a higher level of data encryption to the at least one non-infected device than that provided by the communications network;

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, wherein the bypass network is configured to provide a more secure point-to-point transmission of the anti-viral agent to the at least one non-infected device than the communications network;

circuitry for distributing the anti-viral agent on the potential transmission path to the at least one non-infected device of the communications network via the bypass network, wherein the bypass network is configured to provide a more secure end-to-end transmission of the anti-viral agent to the at least one non-infected device than the communications network.

99. A computer program product comprising:

one or more non-transitory signal-bearing media bearing at least;

(a) one or more instructions for determining a virus associated with a communications network, and

(b) one or more instructions for distributing an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the one or more instructions for distributing configured to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus, including at least;

one or more instructions for selecting an anti-viral agent for distribution that is configured to at least partially starve propagation of the virus by being competitive with the virus for one or more resources of the communications network that are utilized in propagation of the virus.

100. A device comprising:

a multi-network virus immunization system, the multi-network virus immunization system including at least;

(a) a network monitor operable to determine a virus associated with a communications network, and

(b) a response generator operable to distribute an anti-viral agent onto the communications network via a bypass network that provides at least one of a physically-separate transmission path relative to transmission of the virus on the communications network or a logically-separate transmission path relative to transmission of the virus on the communications network, the response generator further operable to distribute the anti-viral agent onto the communications network on a potential transmission path of the virus to at least one non-infected device of the communications network via the bypass network using a competitive propagation of the anti-viral agent with respect to the virus.