Method and apparatus for improving security in a data processing system

• US 8,402,105 B2
• Filed: 06/01/2012
• Issued: 03/19/2013
• Est. Priority Date: 09/18/2003
• Status: Expired due to Term

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Tevanian, Avadis
• Primary Examiner(s): DAILEY, THOMAS J
• Application Number:
  US13/486,532
• Publication Number:
  US 20120239769A1
• Time in Patent Office: 291 Days
• Field of Search: 709/206, 726/22, 726/26
• US Class Current: 709/206
• CPC Class Codes: H04L 51/063 Content adaptation, e.g. replacement of unsuitable content
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms

Abstract

Methods and Apparatuses for processing data are described herein. In one aspect of the invention, an exemplary method receives data which may include an executable portion and a non-executable portion. The non-executable portion of the data may be presented to a user without rendering the executable portion. The non-executable portion of data presented may also include information regarding the executable portion (e.g., subject matter or source of the data). The executable portion of the data is rendered or executed only when a request from a user is specifically received. Other methods and apparatuses are also described.

Claims

1. A method comprising:

receiving, by a computer system, email or message data;

using, by the computer system, latent semantic analysis to divide the email or message data into first and second categories, the first category corresponding to legitimate messages, and the second category corresponding to undesired data,

wherein email or message data in the first category is fully rendered, and wherein email or message data in the second category is partially rendered;

parsing, by the computer system, the email or message data in the second category, wherein parsing includes searching the email or message data for a link that includes a reference to a resource located at a remote location and determining whether the email or message data includes the link, wherein the link includes one or more parameters capable of encoding the identity of a recipient;

presenting, by the computer system, the parsed email or message data to a recipient without presenting the resource referenced by the link, wherein the identity of the recipient is not revealed to the sender, and wherein the presentation includes an indication that the email or message data includes the link or references the resource, and one or more options specifying one or more actions corresponding to the link; and

receiving, by the computer system, a selection corresponding to an option and performing one or more actions associated with the option when the parsed email or message data includes the link.

2. The method of claim 1, wherein the parsing comprises a filtering mechanism.

3. The method of claim 2, wherein the filtering mechanism comprises a latent semantic analysis (LSA).

4. The method of claim 1, further comprising:

receiving, by the computer system, from the recipient of the email, an instruction to add, edit, duplicate, and remove one or more rules regarding incoming message processes.

5. The method of claim 4, wherein the computer system receives the instruction from the user client'"'"'s web browser.

6. The method of claim 4, wherein the instruction is to automatically load the resource referenced by the link.

7. The method of claim 4, wherein the instruction is stored.

8. The method of claim 7, wherein the stored instructions are undone.

9. The method of claim 1, wherein the computer system receives one or more options selected by the recipient for use in a training or an automatic mode or updating the filtering mechanism.

10. The method of claim 9, wherein the options received train an internal system for subsequent message processes.

11. A non-transitory computer-readable storage medium containing executable instructions configured to cause a data processing system to perform operations, including:

receiving email or message data;

using latent semantic analysis to divide the email or message data into first and second categories, the first category corresponding to legitimate messages, and the second category corresponding to undesired data,

wherein email or message data in the first category is fully rendered, and wherein email or message data in the second category is partially rendered;

parsing the email or message data in the second category, wherein parsing includes searching the email or message data for a link that includes a reference to a resource located at a remote location and determining whether the email or message data includes the link, wherein the link includes one or more parameters capable of encoding the identity of a recipient;

presenting the parsed email or message data to a recipient without presenting the resource referenced by the link, wherein the identity of the recipient is not revealed to the sender, and wherein the presentation includes an indication that the email or message data includes the link or references the resource, and one or more options specifying one or more actions corresponding to the link; and

receiving a selection corresponding to an option and performing one or more actions associated with the option when the parsed email or message data includes the link.

12. The medium of claim 11, wherein the parsing comprises a filtering mechanism.

13. The medium of claim 12, wherein the filtering mechanism comprises a latent semantic analysis (LSA).

14. The medium of claim 11, wherein the instructions are further configured to cause the data processing system to receive, from the recipient of the email, an instruction to add, edit, duplicate, and remove one or more rules regarding incoming message processes.

15. The medium of claim 14, wherein the instructions are further configured to cause the data processing system to receive the instruction from the user client'"'"'s web browser.

16. The medium of claim 14, wherein the instruction is to automatically load the resource referenced by the link.

17. The medium of claim 14, wherein the instruction is stored.

18. The medium of claim 17, wherein the stored instructions are undone.

19. The medium of claim 11, wherein the instructions are further configured to cause the data processing system to receive one or more options selected by the recipient for use in a training or an automatic mode or updating the filtering mechanism.

20. The medium of claim 19, wherein the options received train an internal system for subsequent message processes.

21. A data processing system, comprising:

a processor;

a memory storing computer executable instructions that when executed by the processor cause the processor to;

receive email or message data;

use latent semantic analysis to divide the email or message data into first and second categories, the first category corresponding to legitimate messages, and the second category corresponding to undesired data,

wherein email or message data in the first category is fully rendered, and wherein email or message data in the second category is partially rendered;

parse the email or message data in the second category, wherein parsing includes searching the email or message data for a link that includes a reference to a resource located at a remote location and determining whether the email or message data includes the link, wherein the link includes one or more parameters capable of encoding the identity of a recipient;

present the parsed email or message data to a recipient without presenting the resource referenced by the link, wherein the identity of the recipient is not revealed to the sender, and wherein the presentation includes an indication that the email or message data includes the link or references the resource, and one or more options specifying one or more actions corresponding to the link; and

receive a selection corresponding to an option and performing one or more actions associated with the option when the parsed email or message data includes the link.