SYSTEM AND METHOD OF REPORTING AND VISUALIZING MALWARE ON MOBILE NETWORKS

• US 20080086773A1
• Filed: 10/09/2007
• Published: 04/10/2008
• Est. Priority Date: 10/06/2006
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Jiang, Chunyu, Tuvell, George
• Granted Patent: US 9,069,957 B2
• Time in Patent Office: Days
• US Class Current: 726/23
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 63/1491 using deception as countermeasure, e.g. honeypots, honeynets, decoys or entrapment
• CPC Class Codes: H04L 67/75 Indicating network or usage conditions on the user display

Abstract

A network management system monitors malware within a mobile network. The system comprises a receiver component that obtains data regarding malware in the mobile network. The data is obtained from a first source and a second source, where the first source is of a different type than the second source. The monitoring system also includes an analysis component that generates a malware analysis of the mobile network as a function of the data.

Claims

1. A system that monitors malware within a mobile network, comprising:

a receiver component that obtains data regarding the malware in the mobile network, said data is obtained from a first source and a second source, said first source is of a different type than said second source; and

an analysis component that generates a malware analysis of the mobile network as a function of said data.

2. The system of claim 1, said first source and said second source are each selected from the group consisting of:

a mobile phone, a malware collection agent, a BlueTooth enabled mobile device, a WiFi enabled mobile device, an IEEE 802.x enabled mobile device, a network traffic analyzer, a firewall, a network switch, a network router, a gateway, a network management system, and an OAM&

P network management system.

3. The system of claim 1, said first source is at least one mobile device and said second source is a network traffic analyzer.

4. The system of claim 1, further comprising a mitigation component that mitigates an effect of the malware based at least in part upon said malware analysis.

5. The system of claim 4, said mitigation component takes a preventative action, said preventative action is selected from the group consisting of:

generation of an alert for transmission to a mobile device, direction of update of scanner software of said mobile device, and disablement of a data connection of said mobile device.

6. The system of claim 1, further comprising:

a network analyzer component that obtains a data packet; and

a malware scanner that evaluates said data packet and generates said data.

7. The system of claim 1, further comprising a client data server that obtains said data from a mobile device within the mobile network.

8. The system of claim 1, said data includes mobile device specific information.

9. The system of claim 1, said malware analysis includes a spreading pattern based upon correlation of said data from said first source and said second source.

10. The system of claim 1, further comprising a communication component that provides an update to a malware scanning algorithm at said first source.

11. A method of monitoring a mobile network, comprising:

obtaining a malware data from which mobile device identity information is derived; and

processing said malware data to produce a malware analysis that facilitates operator comprehension of a malware on the mobile network.

12. The method of claim 11, further comprising:

receiving said malware data from a mobile device; and

transmitting an acknowledgement of receipt of said malware data, said mobile device deletes said malware data based upon said acknowledgement.

13. The method of claim 11, said obtaining further comprising receiving said malware data from a first source and a second source, said first source is of a different type than said second source and said first source and said second source are each selected from the group consisting of:

a mobile phone, a malware collection agent, a BlueTooth enabled mobile device, a WiFi enabled mobile device, an IEEE 802.x enabled mobile device, a network traffic analyzer, a firewall, a network switch, a network router, a gateway, a network management system, and an OAM&

P network management system.

14. The method of claim 11, further comprising mitigating effects of said malware.

15. The method of claim 14, said mitigating further comprises updating a firewall associated with the mobile network based at least in part on said malware analysis.

16. The method of claim 14, said mitigating further comprises directing a network analyzer to intercept data packets for malware scanning based at least in part on said malware analysis.

17. The method of claim 14, said mitigating further comprises updating a network malware scanning algorithm based at least in part on said malware analysis.

18. The method of claim 14, said mitigating further comprises updating a malware scanning algorithm of a mobile device based at least in part on said malware analysis.

19. A system that facilitates mitigation of malware in a mobile network, comprising:

means for scanning data to obtain first malware data obtained from a first source and second malware data obtained from a second source, said first source is of a different type than said second source; and

means for generating a malware analysis based at least in part upon said first malware data and said second malware data.

20. The system of claim 19, said first source and said second source are each selected from the group consisting of:

a mobile phone, a malware collection agent, a BlueTooth enabled mobile device, a WiFi enabled mobile device, an IEEE 802.x enabled mobile device, a network traffic analyzer, a firewall, a network switch, a network router, a gateway, a network management system, and an OAM&

P network management system.