Method and system for protecting against computer viruses

• US 9,088,593 B2
• Filed: 08/20/2008
• Issued: 07/21/2015
• Est. Priority Date: 07/11/2003
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Inventors: Kwan, Tony
• Primary Examiner(s): Abrishamkar, Kaveh
• Application Number:
  US12/194,654
• Publication Number:
  US 20080313459A1
• Time in Patent Office: 2,526 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method for delivering an update to at least one user, including creating an electronic communication including an update and a unique signature identifying, the electronic communication as including the update and sending the electronic communication to the user.

Claims

1. A method for delivering an update to at least one user, comprising:

receiving a sample of a program;

creating, based at least in part upon the sample, an electronic communication comprising;

an update including a heuristic; and

a digital signature;

identifying said electronic communication as being an authentic electronic communication sent by the creator of said electronic communication; and

identifying said electronic communication as including said update; and

sending said electronic communication to said at least one user, wherein the electronic communication is routed, based on the digital signature, to a particular program that is capable of extracting said update.

2. The method of claim 1, wherein said electronic communication is an email.

3. The method of claim 1, wherein said electronic communication is an instant message.

4. The method of claim 1, wherein said update includes one or more virus signatures.

5. The method of claim 1, wherein said update includes a program update.

6. The method of claim 1 wherein creating the electronic communication comprises:

analyzing the sample;

determining that the sample poses a risk; and

creating the update in response to the determination that the sample poses the risk.

7. The method of claim 1 further comprising storing information associated with the at least one user in a database.

8. A method comprising:

sending a sample of a program;

receiving, in response to sending the sample, an electronic communication comprising a digital signature;

using said digital signature to identify whether said electronic communication is an authentic electronic communication sent by the creator of said electronic communication and to identify whether said electronic communication includes an update, wherein the electronic communication is routed, based on the digital signature, to a particular program that is capable of extracting the update; and

applying said update when said electronic communication has been identified as including said update, wherein the update includes a heuristic.

9. The method of claim 8, wherein said electronic communication is an email.

10. The method of claim 8, wherein said electronic communication is an instant message.

11. The method of claim 8, wherein said update includes one or more virus signatures.

12. The method of claim 8, wherein said update includes a program update.

13. The method of claim 8 further comprising determining that the sample poses a risk.

14. The method of claim 13 further comprising quarantining the sample.

15. A method for delivering an update to at least one user, comprising:

receiving a sample of a program;

creating, based at least in part upon the sample, an electronic communication comprising;

an alert message;

a link to an update, wherein said update includes a heuristic; and

a digital signature identifying said electronic communication as being an authentic electronic communication sent by the creator of said electronic communication and identifying said electronic communication as including said alert message; and

sending said electronic communication to said at least one user, wherein the electronic communication is routed, based on the digital signature, to a particular program that is capable of extracting said update.

16. The method of claim 15, wherein said update includes one or more virus signatures.

17. The method of claim 15, wherein said update includes a program update.

18. The method of claim 15, wherein said alert message includes instructions for obtaining an update.

19. The method of claim 18, wherein said update includes one or more virus signatures.

20. The method of claim 18, wherein said update includes a program update.

21. The method of claim 15, wherein said electronic communication is an email.

22. The method of claim 15, wherein said electronic communication is an instant message.

23. The method of claim 15 wherein using the sample to create the alert message comprises:

analyzing the sample;

determining that the sample poses a risk; and

creating the alert message in response to the determination that the sample poses the risk.

24. The method of claim 15 further comprising storing, in a database, information associated with the at least one user.