Dynamic clip analysis

• US 9,740,390 B2
• Filed: 03/11/2014
• Issued: 08/22/2017
• Est. Priority Date: 03/11/2013
• Status: Active Grant

• Current Assignee: Cyberinc Corporation
• Original Assignee: Spikes, Inc. (Aurionpro Solutions Ltd.)
• Inventors: Spikes, Branden L., Sims, Walter
• Primary Examiner(s): Tiv, Backhean
• Application Number:
  US14/205,023
• Publication Number:
  US 20140258384A1
• Time in Patent Office: 1,260 Days
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 3/0486 Drag-and-drop
• CPC Class Codes: G06F 9/543 User-generated data transfer, e.g. clipboards, dynamic data exchange [DDE], object linking and embedding [OLE]
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 67/025 for remote control or remote monitoring of applications

Abstract

A dynamic clip analysis system for use in a networked server-client system includes: a client including a client-side remote application module configured to analyze content from one or more of a client-side clipboard and a client-side drag and drop utility; and a remote application interactively connected with the client over a network via the client-side remote application module, the remote application including: one or more of a remote clipboard and a remote drag and drop utility; and a client-side remote application module configured to analyze content from one or more of the remote clipboard and the remote drag and drop utility, so as to perform dynamic clip analysis in the server-client system.

Claims

1. A dynamic clip analysis system for use in a networked server device-client device system providing remote processing of content potentially containing malware or malicious content, comprising:

a client device comprising a client-side remote application module that analyzes clips of client-side content that potentially contain malware or malicious content in response to one or more of a client-side clipboard and a client-side drag and drop utility, thereby dynamically analyzing clips of client-side content; and

a server device comprising a remote application, the server device interactively connected with the client device over a network, the remote application comprising;

one or more of a remote clipboard and a remote drag and drop utility; and

a remote application processing block on the server device that receives and applies the client-side content analysis, wherein the client-side content analysis is generated at the client device prior to being received at the remote application, that analyzes clips of remote content potentially containing malware from one or more of the remote clipboard and the remote drag and drop utility, and that performs one or more of processing the remote content and re-encoding the remote content according to client-side administrator functions,

so as to process clips of remote content based on client-side content analysis in an isolated manner on the server device to protect the client device from potential malware or malicious content.

2. The system of claim 1, wherein the client-side remote application module transmits un-cleansed client data via the network from the client device to the remote application processing block on the server device.

3. The system of claim 2, wherein the remote application processing block receives the un-cleansed client data, processes the un-cleansed client data, and re-encodes the un-cleansed client data as cleansed client data.

4. The system of claim 3, wherein the remote application processing block further transmits the cleansed client data via the network from the server device to the client-side remote application module on the client device.

5. The system of claim 1, wherein the remote application further comprises remote storage.

6. The system of claim 5, wherein the remote storage comprises one or more of remote administrator specifications and remote administrator instructions to provide the remote application processing block with input on how to process the received remote content.

7. The system of claim 1, wherein the client device further comprises client-side storage.

8. The system of claim 7, wherein the client-side storage comprises one or more of client-side administrator specifications and client-side administrator functions to provide the client-side remote application module with input on how to process the received client-side content.

9. The system of claim 1, wherein the remote application processing block further performs a remote clipboard transfer action from the remote clipboard to the remote application processing block, wherein the remote clipboard transfer action corresponds to a client-side clipboard transfer action from the client-side clipboard to the client-side remote application module.

10. The system of claim 1, wherein the remote application processing block further performs a remote drag and drop transfer action from the remote drag and drop utility to the remote application processing block, wherein the remote drag and drop transfer action corresponds to a client-side drag and drop transfer action from the client-side drag and drop utility to the client-side remote application module.

11. The system of claim 1, wherein processing the remote content comprises scrubbing the content.

12. A dynamic clip analysis method for use in a networked server device-client device system providing remote processing of content potentially containing malware or malicious content, comprising the steps of:

receiving from a client device, by a remote application on a server device, analysis of clips of client-side content that potentially contain malware or malicious content, wherein the analysis is performed at the client device in response to one or more of a client-side clipboard and a client-side drag and drop utility, wherein the client-side content analysis of clips of client-side content is performed at the client device prior to being received by the remote application on the server device;

applying, by the remote application on the server device, the received analysis of clips of client-side content that potentially contain malware or malicious content;

receiving, by the remote application on the server device, remote content from one or more of a remote clipboard and a remote drag and drop utility;

analyzing, by the remote application on the server device, the received remote content;

processing, by the remote application on the server device, the received remote content according to client-side administrator functions; and

re-encoding, by the remote application on the server device, the received remote content,

so as to process clips of remote content based on client-side content analysis in an isolated manner on the server device to protect the client device from potential malware or malicious content.

13. The method of claim 12, further comprising the step of:

receiving from the client device, by the remote application on the server device, un-cleansed client data transmitted by the client device.

14. The method of claim 13, further comprising the steps of:

receiving, by the remote application on the server device, the un-cleansed client data;

processing, by the remote application on the server device, the un-cleansed client data; and

re-encoding, by the remote application on the server device, the un-cleansed client data as cleansed client data.

15. The method of claim 14, further comprising the step of:

transmitting, by the remote application, the cleansed client data via the network from the server device to the client device.

16. The method of claim 12, wherein the step of processing comprises scrubbing the remote content.

17. The method of claim 12, wherein the step of processing comprises consulting one or more of remote administrator specifications and remote administrator instructions to obtain input on how to process the received remote content.

18. A dynamic clip analysis system for use in a networked server device-client device system providing remote processing of content potentially containing malware or malicious content, comprising:

a client device comprising a client-side remote application module that analyzes clips of client-side content that potentially contain malware or malicious content in response to one or more of a client-side clipboard and a client-side drag and drop utility, thereby dynamically analyzing clips of client-side content; and

a server device comprising a remote application, the server device interactively connected with the client device over a network via the client-side remote application module, the remote application comprising;

one or more of a remote clipboard and a remote drag and drop utility;

remote storage on the server device, the remote storage comprising one or more of remote administrator specifications and remote administrator instructions to provide a remote application processing block with input on how to process the received remote content; and

a remote application processing block on the server device that receives and applies client-side content analysis from the client device, wherein the client-side content analysis is generated at the client device prior to being received at the remote application, wherein the remote application processing block on the server device further analyzes clips of remote content potentially containing malware from one or more of the remote clipboard and the remote drag and drop utility, wherein the remote application processing block on the server device further performs one or more of processing the remote content and re-encoding the remote content, and wherein the remote application processing block on the server device further receives un-cleansed client data via the network from the client device, processes the un-cleansed client data according to client-side administrator functions, re-encodes the un-cleansed client data as cleansed client data, and transmits the cleansed client data via the network from the server device to the client-side remote application module on the client device,

so as to process clips of remote content based on client-side content analysis in an isolated manner on the server device to protect the client device from potential malware or malicious content.