Preventing propagation of malicious content in a virtual universe

• US 9,785,909 B2
• Filed: 08/27/2009
• Issued: 10/10/2017
• Est. Priority Date: 08/27/2009
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Hamilton, II, Rick A., O'Connell, Brian M., Pickover, Clifford A., Walker, Keith R.
• Primary Examiner(s): McCormick, Gabrielle
• Assistant Examiner(s): SENSENIG, SHAUN D
• Application Number:
  US12/548,462
• Publication Number:
  US 20110054918A1
• Time in Patent Office: 2,966 Days
• Field of Search: 705 11, 705319, 715706, 715757, 707952
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders
• CPC Class Codes: G06Q 50/01 Social networking

Abstract

An invention for preventing propagation of malicious content within a virtual universe is provided. In one embodiment, a malicious content propagation prevention tool provides this capability. The malicious content propagation prevention tool includes a scanning component configured to scan a plurality of inventory items within a virtual universe. An identification component is configured to identify a set of malicious inventory from the plurality of inventory items. The malicious content propagation prevention tool further comprises an assurance component configured to prevent propagation of malicious content within the virtual universe by performing at least one of the following: isolating the set of malicious inventory items, and modifying a malicious behavior caused by the set of malicious inventory items.

Claims

1. A method for preventing propagation of malicious content within a virtual universe, comprising:

a computing device determining whether an avatar has entered a new region in the virtual universe;

the computing device scanning, in response to a determination that the avatar has entered the new region in the virtual universe, a plurality of inventory items within an inventory of an avatar within the virtual universe, the virtual universe being a server-based virtual environment in a client-server system in which a plurality of client users interact with each other and with the virtual environment via avatars associated with the client users, each inventory item of the plurality of inventory items being a virtual item that is associated with the avatar, visible within the virtual universe and usable by the avatar within the virtual universe,

the computing device determining whether the avatar has received an item from another avatar;

the computing device scanning, in response to a determination that the avatar has received an item from another avatar, the plurality of inventory items;

the computing device determining whether the avatar has purchased an item;

the computing device scanning, in response to a determination that the avatar has the avatar has purchased an item, the plurality of inventory items;

the computing device determining whether the avatar has teleported;

the computing device scanning, in response to a determination that the avatar has teleported, the plurality of inventory items;

the computing device determining whether the avatar has used an item;

the computing device scanning, in response to a determination that the avatar has used an item, the plurality of inventory items;

the computing device determining whether the avatar has interacted with an item;

the computing device scanning, in response to a determination that the avatar has interacted with an item, the plurality of inventory items;

the computing device identifying a set of malicious inventory items from the plurality of inventory items;

the computing device providing a visual notification rendered within the virtual universe identifying the set of malicious inventory items; and

the computing device preventing propagation of malicious content within the virtual universe by replacing the set of malicious inventory items with a set of non-malicious inventory items within the inventory of the avatar.

2. The method according to claim 1, further comprising generating, along with the visual notification, at least one of the following:

a certification sent by postal mail, a telephone call, and a text message, and wherein the visual notification comprises at least one of;

a message provided in the virtual universe, a visual change in the color of the set of malicious inventory items, and a visual warning displayed on the set of malicious inventory items.

3. The method according to claim 2 further comprising the computing device charging a fee for performing at least one of the following:

isolating the set of malicious inventory items, modifying a malicious behavior caused by the set of malicious inventory items, and providing a notification in the case that a set of malicious inventory items is identified.

4. The method according to claim 1, further comprising sending the set of malicious inventory items to a quarantined section to prevent the set of malicious inventory items from being at least one of the following:

used, traded, and removed from the inventory.

5. The method according to claim 1, further comprising modifying the set of malicious inventor items by erasing a portion of virtual language programming code that is causing the malicious behavior.

6. A computer system for preventing propagation of malicious content within a virtual universe, comprising:

at least one processing unit;

memory operably associated with the at least one processing unit; and

a malicious content propagation prevention tool storable in memory and executable by the at least one processing unit, the malicious content propagation prevention tool comprising;

an event handler configured to check for an occurrence of a set of events, including;

an avatar entering a new region in the virtual universe;

the avatar receiving an item from another avatar;

the avatar purchasing an item;

the avatar teleporting;

the avatar using an item; and

the avatar interacting with an item;

a scanning component configured to scan, in response to the occurrence of any of the set of events, a plurality of inventory items within an inventory of an avatar within a virtual universe, the virtual universe being a server-based virtual environment in a client-server system in which a plurality of client users interact with each other and with the virtual environment via avatars associated with the client users, each inventory item of the plurality of inventory items being a virtual item that is associated with the avatar, visible within the virtual universe and usable by the avatar within the virtual universe,

an identification component configured to identify a set of malicious inventory items from the plurality of inventory items;

a notification component configured to provide a visual notification rendered in the virtual universe in the case that a set of malicious inventory items is identified; and

an assurance component configured to prevent propagation of malicious content within the virtual universe by replacing the set of malicious inventory items with a set of non-malicious inventory items within the inventory of the avatar.

7. The malicious content propagation prevention tool according to claim 6, the notification component further configured to generate, along with the visual notification, at least one of the following:

a certification sent by postal mail, a telephone call, and a text message, and wherein the visual notification comprises at least one of;

a message provided in the virtual universe, a visual change in the color of the set of malicious inventory items, and a visual warning displayed on the set of malicious inventory items.

8. The malicious content propagation prevention tool according to claim 6 further comprising a transaction component configured to charge a fee for performing at least one of the following:

isolating the set of malicious inventory items, modifying a malicious behavior caused by the set of malicious inventory items, and providing a notification in the case that a set of malicious inventory items is identified.

9. The malicious content propagation prevention tool according to claim 6, the assurance component configured to send the set of malicious inventory items to a quarantined section to prevent the set of malicious inventory items from being at least one of the following:

used, traded, and removed from the inventory.

10. The malicious content propagation prevention tool according to claim 6, the assurance component further configured to modify the set of malicious inventor items by erasing a portion of virtual language programming code that is causing the malicious behavior.

11. A non-transitory computer-readable storage medium storing computer instructions, which when executed, enables a computer system to prevent propagation of malicious content within a virtual universe, the computer instructions comprising:

checking for an occurrence of a set of events, including;

an avatar entering a new region in the virtual universe;

the avatar receiving an item from another avatar;

the avatar purchasing an item;

the avatar teleporting;

the avatar using an item; and

the avatar interacting with an item;

scanning, in response to the occurrence of any of the set of events, a plurality of inventory items within an inventory of an avatar within a virtual universe, the virtual universe being a server-based virtual environment in a client-server system in which a plurality of client users interact with each other and with the virtual environment via avatars associated with the client users, each inventory item of the plurality of inventory items being a virtual item that is associated with the avatar, visible within the virtual universe and usable by the avatar within the virtual universe,

identifying a set of malicious inventory items from the plurality of inventory items;

providing a visual notification rendered within the virtual universe identifying the set of malicious inventory items; and

preventing propagation of malicious content within the virtual universe by replacing the set of malicious inventory items with a set of non-malicious inventory items within the inventory of the avatar.

12. The non-transitory computer-readable storage medium according to claim 11, further comprising generating, along with the visual notification, at least one of the following:

a certification sent by postal mail, a telephone call, and a text message, and wherein the visual notification comprises at least one of;

a message provided in the virtual universe, a visual change in the color of the set of malicious inventory items, and a visual warning displayed on the set of malicious inventory items.

13. The non-transitory computer readable storage medium according to claim 12 further comprising computer instructions for charging a fee for performing at least one of the following:

isolating the set of malicious inventory items, modifying a malicious behavior caused by the set of malicious inventory items, and providing a notification in the case that a set of malicious inventory items is identified.

14. The non-transitory computer-readable storage medium according to claim 11, the computer instructions for preventing propagation of malicious content comprising sending the set of malicious inventory items to a quarantined section to prevent the set of malicious inventory items from being at least one of the following:

used, traded, and removed from the inventory.

15. The non-transitory computer readable storage medium according to claim 11, the computer instructions for preventing further comprising modifying the set of malicious inventor items by erasing a portion of virtual language programming code that is causing the malicious behavior.

16. A method for deploying a malicious content propagation prevention tool for use in a computer system that prevents propagation of malicious content within a virtual universe, comprising:

providing a computer infrastructure operable to;

check for an occurrence of a set of events, including;

an avatar entering a new region in the virtual universe;

the avatar receiving an item from another avatar;

the avatar purchasing an item;

the avatar teleporting;

the avatar using an item, and

the avatar interacting with an item;

scan, in response to the occurrence of any of the set of events, a plurality of inventory items within an inventory of an avatar within a virtual universe, the virtual universe being a server-based virtual environment in a client-server system in which a plurality of client users interact with each other and with the virtual environment via avatars associated with the client users, each inventory item of the plurality of inventory items being a virtual item that is associated with the avatar, visible within the virtual universe and usable by the avatar within the virtual universe,

identify a set of malicious inventory items from the plurality of inventory items;

provide a visual notification rendered within the virtual universe identifying the set of malicious inventory items; and

prevent propagation of malicious content within the virtual universe by replacing the set of malicious inventory items with a set of non-malicious inventory items within the inventory of the avatar.

17. The method according to claim 16, further comprising generating an additional notification identifying the set of malicious inventory items, the additional notification comprising at least one of the following:

a certification sent by postal mail, a telephone call, and a text message, and wherein the visual notification comprises at least one of;

a message provided in the virtual universe, a visual change in the color of the set of malicious inventory items, and a visual warning displayed on the set of malicious inventory items.

18. The method according to claim 16, the computer infrastructure further operable to charge a fee for performing at least one of the following:

isolating the set of malicious inventory items, modifying a malicious behavior caused by the set of malicious inventory items, and providing a notification in the case that a set of malicious inventory items is identified.

19. The method according to claim 16, the computer infrastructure operable to prevent propagation of malicious content within the virtual universe by sending the set of malicious inventory items to a quarantined section to prevent the set of malicious inventory items from being at least one of the following:

used, traded, and removed from the inventory.

20. The method according to claim 16, the computer infrastructure operable to prevent propagation of malicious content within the virtual universe further comprising modifying the set of malicious inventor items by erasing a portion of virtual language programming code that is causing the malicious behavior.