Abstract Systems and methods for detecting malicious or potenitally malicious script data are
provided. Script data is extracted from a data stream at the network level and emulated in a …

Example techniques herein filter and classify security-relevant events from monitored
computing devices. A control unit can receive event records of various types, each event …

The present invention relates to an apparatus and a method for detecting a malware code by
generating and analyzing behavior pattern. A malware code detecting apparatus includes a …

(74) Attorney, Agent, or Firm—Rutan & Tucker, LLP (57) ABSTRACT For one embodiment, a
computerized method for detecting exploit attacks on an interpreter comprises configuring a …

A computing device can install and execute a security agent that interacts with a remote
security system as part of a detection loop aimed at detecting malicious attacks. The remote …

Cardinality-based activity pattern detection is described herein. Events on a computing
system are monitored to detect patterns matching defined activity patterns. A cardinality …

A computing apparatus, including: a processor and a memory; a web browser; and a web
exploit mitigation engine, including instructions within the memory to instruct the processor …

Methods and systems for detecting malicious activity on a network. The methods described
herein involve gathering data regarding a first state of a computing environment, executing …

The present invention relates to a cryptographic block identification apparatus which, in
order to analyze encryption logic used by malware to conceal communication, identifies a …

A method by one or more computing devices for obfuscating challenge code. The method
includes obtaining challenge code for interrogating a client, inserting, into the challenge …