Patents Assigned to McAfee, LLC
  • Patent number: 10699358
    Abstract: A hidden information detector for image files extracts N least significant bits from each of a first set of pixels of an image file, wherein N is an integer greater than or equal to 1. The detector then applies a mask to each of the extracted N least significant bits to form a second set of pixel values and determines a first probability as to whether the second set of pixels encodes a hidden image. Responsive to the first probability exceeding a first threshold, the detector determines a second probability as to whether the second set of pixels matches an image encoded in the first set of pixels. Responsive to a determination that the second probability is less than a second threshold, the detector performs a non-image classifier on the second set of pixels.
    Type: Grant
    Filed: February 22, 2018
    Date of Patent: June 30, 2020
    Assignee: MCAFEE, LLC
    Inventors: German Lancioni, Sherin M. Mathews
  • Publication number: 20200204580
    Abstract: Particular embodiments described herein provide for a system that can be configured to facilitate the use of a blockchain for distributed denial of service attack mitigation, the system can include a network security provider and a validating node. The network security provider can recognize that a distributed denial of service (DDoS) attack is occurring, create a block that includes data related to the DDoS attack, and publish the block that includes the data related to the DDoS attack for addition to a blockchain. The validating node can validate the block that includes the data related to the DDoS attack and the block that includes the data related to the DDoS attack can be added to the blockchain. The block that includes the data related to the DDoS attack can be analyzed to determine how to mitigate a similar DDoS attack.
    Type: Application
    Filed: December 19, 2018
    Publication date: June 25, 2020
    Applicant: McAfee, LLC
    Inventors: Tirumaleswar Reddy Konda, Harsha Ramamurthy Joshi, Piyush Pramod Joshi, Eric Donald Wuehler
  • Patent number: 10691739
    Abstract: In an example, there is disclosed a computing apparatus, including one or more logic elements, including at least one hardware logic element, comprising a classification engine to: receive a clean multi-labeled dataset comprising a plurality of document each assigned to one or more of a plurality of categories; receive an unclean multi-labeled dataset; and produce a recategorized and cleansed dataset from the unclean multi-labeled dataset, comprising predicting a number of labels {circumflex over (l)} for a document j, and comparing {circumflex over (l)} to an existing number of labels l. There is also disclosed a method of providing a classification engine.
    Type: Grant
    Filed: December 22, 2015
    Date of Patent: June 23, 2020
    Assignee: McAfee, LLC
    Inventors: Nidhi Singh, Craig Philip Olinsky, Thamizhannal Paramasivam
  • Patent number: 10691476
    Abstract: Particular embodiments described herein provide for an electronic device that can be configured to monitor access to data in a secured area of memory at a hypervisor level, receive a request from a process to the data in the secured area, and deny the request if the process is not a trusted process. In an example, the electronic device is a point of sale device.
    Type: Grant
    Filed: June 27, 2015
    Date of Patent: June 23, 2020
    Assignee: McAfee, LLC
    Inventors: Aditya Kapoor, Jonathan L. Edwards
  • Publication number: 20200195610
    Abstract: The present disclosure combines Software Defined Networks (SDN) concepts with Security concepts. The coordination between SDN and Security provides a myriad of advantageous use cases. One exemplary use case involves providing a fast path at network speeds using SDN by routing network traffic to bypass a security appliance once the security appliance determines that the security appliance no longer needs to inspect the network traffic. Another exemplary use case involves remote provisioning of security zones.
    Type: Application
    Filed: February 21, 2020
    Publication date: June 18, 2020
    Applicant: McAfee, LLC
    Inventors: Geoffrey Howard Cooper, John Richard Guzik
  • Patent number: 10685116
    Abstract: Methods, apparatus, systems, and articles of manufacture to remediate ransomware are disclosed. An example malware scanner includes a sinkhole generator to generate a sinkhole directory. The example malware scanner includes a storage device adapted to store a computer file and the sinkhole directory, wherein the sinkhole directory recursively expands when the computer file performs a file listing of the sinkhole directory to occupy the computer file by extending a period of time taken to perform the file listing of the sinkhole directory. The example malware scanner includes an analyzer to monitor execution of the computer file while the computer file is performing the file listing of the sinkhole directory to attempt to identify an indicator of compromise associated with the computer file, the analyzer to classify the computer file as ransomware when the analyzer identifies the indicator of compromise. The example malware scanner includes a cleaner to remediate the ransomware.
    Type: Grant
    Filed: February 23, 2018
    Date of Patent: June 16, 2020
    Assignee: McAfee, LLC
    Inventor: Ghanashyam Satpathy
  • Patent number: 10685171
    Abstract: A steganographic coding detector (and method) analyzes one or more pages of a file. For each page containing text strings, the detector counts a number of A0h and 20h characters for the text string. For each text string for which the number of A0h characters is greater than a first threshold, the detector sets a flag to a first state, The first threshold is computed based on the number of 20h characters in that text string. For each text string for which the number of 20h characters is less than the first threshold, the detector sets the flag to a second state. Responsive to the number of text strings that have a flag at the first state being greater than a second threshold, the detector marks the file as being steganographically encoded.
    Type: Grant
    Filed: January 31, 2018
    Date of Patent: June 16, 2020
    Assignee: McAfee, LLC
    Inventors: German Lancioni, Jonathan B. King, Eric D. Wuehler
  • Publication number: 20200183761
    Abstract: There is disclosed, in one example, a computing apparatus for providing a portable user interface agnostic to a native host implementation, including: a hardware platform including a processor and a memory; a first functional domain including logic to provide the user interface; a second functional domain including logic to provide native functionality; a function storage including logic to assign a unique identifier to a function of the second functional domain; and an application programming interface (API) interpreter to enable the first functional domain to access the function of the second functional domain via the unique identifier for the function.
    Type: Application
    Filed: December 10, 2018
    Publication date: June 11, 2020
    Applicant: McAfee, LLC
    Inventors: Chris M. Roy, Shuborno Biswas
  • Patent number: 10681119
    Abstract: Embodiments of the present disclosure include an Orchestrator to commission a point of presence (PoP) node based on receiving an internet protocol (IP) address, the IP address associated with a geographic location; and a global routing manager for assigning a client device to a PoP node based on the received IP address. Embodiments also include a performance manager to acquire performance information about each PoP node.
    Type: Grant
    Filed: August 24, 2018
    Date of Patent: June 9, 2020
    Assignee: McAfee, LLC
    Inventors: Ralf Horstmann, Juergen Kendzorra, Pavan Kumar Madikonda, Andre Stein, Martin Stecher
  • Patent number: 10678908
    Abstract: In one example embodiment, an electronic device is provided and configured to: acquire authentication data for an authorized user; store the authentication data in an enclave; acquire identification data for a potential user; and compare, in the enclave, the identification data to the authentication data for recognizing if the potential user is the authorized user. In another embodiment, a server is provided and includes at least one processor; at least one memory; at least one driver, where the server is configured to: receive assertion data from an electronic device, where the assertion includes an authentication signing key and results from a comparison of acquired data and reference data; and determine if the assertion data is valid by: comparing the results to a threshold; and comparing the authentication signing key to an authentication signing key assigned to the electronic device.
    Type: Grant
    Filed: December 21, 2013
    Date of Patent: June 9, 2020
    Assignee: McAfee, LLC
    Inventors: Steve Grobman, Carl Woodward, James D. Beaney, Jr., Jimmy Scott Raynor
  • Patent number: 10673852
    Abstract: Organizing a trusted network includes receive, by a local device, a message from a first remote trusted device identifying a first service hosted by the first remote trusted device, wherein the local device and the first remote trusted device are in a trusted network. Organizing a trusted network also includes indexing, by the local device, the first service in a registry comprising services available to the local device and a location of each service available, wherein the registry is local to the local device.
    Type: Grant
    Filed: December 23, 2014
    Date of Patent: June 2, 2020
    Assignee: McAfee, LLC
    Inventors: Ned M. Smith, Venkata Ramanan Sambandam
  • Patent number: 10666622
    Abstract: A disclosed example includes downloading a local proxy responsive to a request by a browser; obtaining and installing a configuration profile; activating an internal virtual private network service; establishing the local proxy through the internal virtual private network service; and running the local proxy.
    Type: Grant
    Filed: April 26, 2019
    Date of Patent: May 26, 2020
    Assignee: McAfee, LLC
    Inventor: Mathieu Rene
  • Patent number: 10666646
    Abstract: A method in one example implementation includes extracting a plurality of data elements from a record of a data file, tokenizing the data elements into tokens, and storing the tokens in a first tuple of a registration list. The method further includes selecting one of the tokens as a token key for the first tuple, where the token is selected because it occurs less frequently in the registration list than each of the other tokens in the first tuple. In specific embodiments, at least one data element is an expression element having a character pattern matching a predefined expression pattern that represents at least two words and a separator between the words. In other embodiments, at least one data element is a word defined by a character pattern of one or more consecutive essential characters. Other specific embodiments include determining an end of the record by recognizing a predefined delimiter.
    Type: Grant
    Filed: March 27, 2019
    Date of Patent: May 26, 2020
    Assignee: McAfee, LLC
    Inventors: Ratinder Paul Singh Ahuja, William J. Deninger
  • Patent number: 10664583
    Abstract: A system for accessing a trusted execution environment includes instructions to transmit, from a first trusted execution environment, a request for a biometric match claim, receive, in response to the request for a biometric match claim, biometric data from a biometric capture device, perform a match of the biometric data against biometric templates stored in the first trusted execution environment, and unseal a second trusted execution environment based on the match data.
    Type: Grant
    Filed: March 29, 2019
    Date of Patent: May 26, 2020
    Assignee: McAfee, LLC
    Inventors: Francois Proulx, Mathieu Rene
  • Patent number: 10659479
    Abstract: Particular embodiments may include a system, apparatus, method, and/or machine readable storage medium for determining sensor usage by: detecting, at a level below an operating system executing on a computing device, one or more requests from an application to access one or more sensors associated with the computing device; determining, based on the one or more requests from the application to access the one or more sensors, that the application requested unexpected access to the one or more sensors; and performing a remedial action in response to the unexpected access requested by the application.
    Type: Grant
    Filed: March 27, 2015
    Date of Patent: May 19, 2020
    Assignee: McAfee, LLC
    Inventors: Alexander J. Hinchliffe, Pablo R. Passera, Ranjith Kumar Jidigam, Alger Wan Kwong Yeung, Simon Hunt
  • Patent number: 10657246
    Abstract: An example method includes executing a first executable application designed for execution using a first application programming interface (API). A first registration request is accessed from a second executable application designed for execution using a second API different from the first API, the first API and the second API executed within a same operating system environment. In response to validating of a digital certification of the second application, information from the first registration request is saved into a registration store. An event is raised having an event type and event information, and in response to determining that an event type of the raised event is saved in the registration store, the raised event is sent without requiring further authentication from the second executable application.
    Type: Grant
    Filed: March 28, 2018
    Date of Patent: May 19, 2020
    Assignee: McAfee, LLC
    Inventors: Shuborno Biswas, Keefer T. Davies, Junmin Qiu, Christopher M. Roy
  • Patent number: 10652210
    Abstract: A method is provided in one example embodiment that includes receiving metadata from a host over a metadata channel. The metadata may be correlated with a network flow and a network policy may be applied to the connection. In other embodiments, a network flow may be received from a host without metadata associated with the flow, and a discovery redirect may be sent to the host. Metadata may then be received and correlated with the flow to identify a network policy action to apply to the flow.
    Type: Grant
    Filed: August 24, 2017
    Date of Patent: May 12, 2020
    Assignee: McAfee, LLC
    Inventors: Geoffrey Cooper, Michael W. Green, John Richard Guzik
  • Patent number: 10652218
    Abstract: There is disclosed in an example a computing apparatus, comprising: a network interface; a messaging application to communicate via the network interface; and one or more logic elements comprising a security layer, discrete from the messaging application, to: generate a message; secure the message; and send the message via the messaging application.
    Type: Grant
    Filed: December 28, 2016
    Date of Patent: May 12, 2020
    Assignee: McAfee, LLC
    Inventors: German Lancioni, Carl D. Woodward, Mario Leandro Bertogna
  • Patent number: 10645115
    Abstract: Embodiments are configured to receive metadata of a process intercepted on an end host when attempting to access a network. The metadata includes a hash of an application associated with the process and an endpoint reputation score of the application. Embodiments are configured to request a threat intelligence reputation score based on the hash of the application, to determine an action to be taken by the end host based, at least in part, on one or more policies and at least one of the threat intelligence reputation score and the endpoint reputation score, and to send a response indicating the action to be taken by the end host. Further embodiments request another threat intelligence reputation score based on another hash of a dynamic link library module loaded by the process on the end host, and the action is determined based, at least in part, on the other threat intelligence score.
    Type: Grant
    Filed: February 7, 2019
    Date of Patent: May 5, 2020
    Assignee: McAfee, LLC
    Inventors: Chandan C P, Srinivasan Narasimhan
  • Patent number: RE48043
    Abstract: A system, method and computer program product are provided for sending, to a central system, information associated with unwanted activity. In use, information associated with unwanted activity is identified utilizing a plurality of different types of security systems. Further, the information is sent to a central system.
    Type: Grant
    Filed: December 27, 2014
    Date of Patent: June 9, 2020
    Assignee: McAfee, LLC
    Inventor: Ahmed Said Sallam