Patents by Inventor Calvin H. SMITH

Calvin H. SMITH has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • System and method for advanced malware analysis
    Patent number: 9106692
    Abstract: A system and a method for advanced malware analysis. The method filters incoming messages with a watch-list, the incoming messages including attachments, if an incoming message matches the watch-list, forwards the message to a malware detection engine, strips the attachments from the forwarded message, the one or more attachments including one or more executable files, launches a plurality of sandboxes, executes each of the executable files in the plurality of sandboxes, the sandboxes generating analysis results that may be used to determine whether each executable file is malicious, normalizes the analysis results, evaluates the risk level of the attachments to the forwarded message based on the normalized analysis results of the executable files in the attachments to the forwarded message, and, if the risk level of an attachment to the forwarded message is above a certain level, determines that the forwarded message is malicious and permanently quarantines the forwarded message.
    Type: Grant
    Filed: January 31, 2013
    Date of Patent: August 11, 2015
    Assignee: NORTHROP GRUMMAN SYSTEMS CORPORATION
    Inventors: Calvin H. Smith, Kenneth Maclean, Jason J. Liu, Stephen Mann, Wendy Mann, Ryan Chapin
  • SYSTEM AND METHOD FOR ADVANCED MALWARE ANALYSIS
    Publication number: 20140215617
    Abstract: A system and a method for advanced malware analysis. The method filters incoming messages with a watch-list, the incoming messages including attachments, if an incoming message matches the watch-list, forwards the message to a malware detection engine, strips the attachments from the forwarded message, the one or more attachments including one or more executable files, launches a plurality of sandboxes, executes each of the executable files in the plurality of sandboxes, the sandboxes generating analysis results that may be used to determine whether each executable file is malicious, normalizes the analysis results, evaluates the risk level of the attachments to the forwarded message based on the normalized analysis results of the executable files in the attachments to the forwarded message, and, if the risk level of an attachment to the forwarded message is above a certain level, determines that the forwarded message is malicious and permanently quarantines the forwarded message.
    Type: Application
    Filed: January 31, 2013
    Publication date: July 31, 2014
    Applicant: NORTHROP GRUMMAN SYSTEMS CORPORATION
    Inventors: Calvin H. SMITH, Kenneth MACLEAN, Jason J. LIU, Stephen MANN, Wendy MANN, Ryan CHAPIN