Patents by Inventor Gregory William Dalcher

Gregory William Dalcher has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Automated local exception rule generation system, method and computer program product
    Patent number: 8646025
    Abstract: A system, method and computer program product are provided for automatically generating a rule exception. An event is identified that at least potentially violates a rule. Thereafter, an exception to the rule is automatically generated.
    Type: Grant
    Filed: December 21, 2005
    Date of Patent: February 4, 2014
    Assignee: McAfee, Inc.
    Inventors: Gregory William Dalcher, Hemang Satish Nadkarni
  • System, method, and computer program product for hooking code inserted into an address space of a new process
    Patent number: 8627305
    Abstract: A system, method, and computer program product are provided for hooking code inserted into an address space of a new process. In use, creation of a process is identified. Additionally, code is inserted into an address space of the process. Still yet, at least one module being loaded in association with the process is identified. Further, the code is hooked at an entry point of the at least one module based on a determination of whether the at least one module includes a predefined module.
    Type: Grant
    Filed: March 24, 2009
    Date of Patent: January 7, 2014
    Assignee: McAfee, Inc.
    Inventors: Gregory William Dalcher, Jonathan L. Edwards
  • System, method, and computer program product for dynamically adjusting a level of security applied to a system
    Patent number: 8621608
    Abstract: A system, method, and computer program product are provided for dynamically adjusting a level of security applied to a system. In use, predetermined activity that is at least potentially associated with unwanted activity is identified on a system. Further, a level of security applied to the system is dynamically adjusted, in response to the identification of the predetermined activity.
    Type: Grant
    Filed: April 29, 2008
    Date of Patent: December 31, 2013
    Assignee: McAfee, Inc.
    Inventor: Gregory William Dalcher
  • SYSTEM, METHOD AND COMPUTER PROGRAM PRODUCT FOR UTILIZING CODE STORED IN A PROTECTED AREA OF MEMORY FOR SECURING AN ASSOCIATED SYSTEM
    Publication number: 20130339646
    Abstract: A security system, method, and computer program product are provided. In use, code is stored in a protected area of memory. In addition, the stored code is utilized for securing a system associated with the protected area of memory.
    Type: Application
    Filed: August 13, 2013
    Publication date: December 19, 2013
    Inventor: Gregory William Dalcher
  • System, method, and computer program product for detecting at least potentially unwanted activity based on execution profile monitoring
    Patent number: 8613084
    Abstract: A system, method, and computer program product are provided for detecting at least potentially unwanted activity based on execution profile monitoring. In use, an execution profile of code is monitored utilizing call frame monitoring. Further, at least potentially unwanted activity is detected based on the monitoring of the execution profile.
    Type: Grant
    Filed: September 18, 2007
    Date of Patent: December 17, 2013
    Assignee: McAfee, Inc.
    Inventor: Gregory William Dalcher
  • System, method and computer program product for interception of user mode code execution and redirection to kernel mode
    Patent number: 8572729
    Abstract: A system, method and computer program product are provided. In use, code is executed in user mode. Further, the execution of the code is intercepted. In response to the interception, operations are performed in kernel mode.
    Type: Grant
    Filed: January 30, 2006
    Date of Patent: October 29, 2013
    Assignee: McAfee, Inc.
    Inventors: Joe C. Lowe, Jonathan L. Edwards, Gregory William Dalcher
  • Automated local exception rule generation system, method and computer progam product
    Publication number: 20130275998
    Abstract: A system, method and computer program product are provided for automatically generating a rule exception. An event is identified that at least potentially violates a rule. Thereafter, an exception to the rule is automatically generated.
    Type: Application
    Filed: December 21, 2005
    Publication date: October 17, 2013
    Inventors: Gregory William Dalcher, Hemang Satish Nadkarni
  • SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR INVOKING AN APPLICATION PROGRAM INTERFACE WITHIN AN INTERCEPTION OF ANOTHER APPLICATION PROGRAM INTERFACE
    Publication number: 20130276002
    Abstract: A system, method, and computer program product are provided for invoking an application program interface within an interception of another application program interface. In use, a first application program interface invoked utilizing a first thread is intercepted. Further, a second application program interface is invoked within the interception of the first application program interface, utilizing a second thread.
    Type: Application
    Filed: January 24, 2008
    Publication date: October 17, 2013
    Inventor: Gregory William Dalcher
  • SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR IDENTIFYING UNWANTED DATA BASED ON AN ASSEMBLED EXECUTION PROFILE OF CODE
    Publication number: 20130275952
    Abstract: A system, method, and computer program product are provided for identifying unwanted data based on an assembled execution profile of code. In use, an execution profile of code is assembled by tracking interface usage of the code. Further, it is determined whether the code is associated with unwanted activity, based on the execution profile.
    Type: Application
    Filed: March 5, 2008
    Publication date: October 17, 2013
    Inventor: Gregory William Dalcher
  • SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR DYNAMICALLY ADJUSTING A LEVEL OF SECURITY APPLIED TO A SYSTEM
    Publication number: 20130276112
    Abstract: A system, method, and computer program product are provided for dynamically adjusting a level of security applied to a system. In use, predetermined activity that is at least potentially associated with unwanted activity is identified on a system. Further, a level of security applied to the system is dynamically adjusted, in response to the identification of the predetermined activity.
    Type: Application
    Filed: April 29, 2008
    Publication date: October 17, 2013
    Inventor: Gregory William Dalcher
  • SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR UTILIZING CODE STORED IN A PROTECTED AREA OF MEMORY FOR SECURING AN ASSOCIATED SYSTEM
    Publication number: 20130276132
    Abstract: A security system, method, and computer program product are provided. In use, code is stored in a protected area of memory. In addition, the stored code is utilized for securing a system associated with the protected area of memory.
    Type: Application
    Filed: February 12, 2007
    Publication date: October 17, 2013
    Inventor: Gregory William Dalcher
  • SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR DETECTING AT LEAST POTENTIALLY UNWANTED ACTIVITY BASED ON EXECUTION PROFILE MONITORING
    Publication number: 20130276110
    Abstract: A system, method, and computer program product are provided for detecting at least potentially unwanted activity based on execution profile monitoring. In use, an execution profile of code is monitored utilizing call frame monitoring. Further, at least potentially unwanted activity is detected based on the monitoring of the execution profile.
    Type: Application
    Filed: September 18, 2007
    Publication date: October 17, 2013
    Inventor: Gregory William Dalcher
  • SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR REMOVING MALWARE FROM A SYSTEM WHILE THE SYSTEM IS OFFLINE
    Publication number: 20130276113
    Abstract: A system, method, and computer program product are provided for removing malware from a system while the system is offline. In use, a system is identified as being infected with malware. Additionally, it is determined whether the malware can be fully removed from the system while the system is online. Further, at least part of the malware is conditionally removed from the system while the system is offline, based on the determining.
    Type: Application
    Filed: October 1, 2010
    Publication date: October 17, 2013
    Applicant: MCAFEE, INC.
    Inventors: Gregory William Dalcher, Joel R. Spurlock
  • SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR MONITORING AN EXECUTION FLOW OF A FUNCTION
    Publication number: 20130275981
    Abstract: A system, method, and computer program product are provided for monitoring an execution flow of a function. In use, data associated with a function is identified within a call stack. Additionally, a call stack frame is determined from freed memory in the call stack. Further, an execution flow of the function is monitored, utilizing the call stack frame from the freed memory.
    Type: Application
    Filed: October 7, 2010
    Publication date: October 17, 2013
    Applicant: McAfee, Inc.
    Inventor: Gregory William Dalcher
  • SYSTEM, METHOD AND COMPUTER PROGRAM PRODUCT FOR MONITORING AND/OR ANALYZING AT LEAST ONE ASPECT OF AN INVOCATION OF AN INTERFACE
    Publication number: 20130275950
    Abstract: A system, method and computer program product are provided. In use, execution of a portion of internal code of an interface is identified. Further, in response to the execution of the portion of internal code, at least one aspect of an invocation of the interface is monitored and/or analyzed.
    Type: Application
    Filed: January 24, 2007
    Publication date: October 17, 2013
    Inventor: Gregory William Dalcher
  • SYSTEM, METHOD AND COMPUTER PROGRAM PRODUCT FOR DEFERRING INTERFACE MONITORING BASED ON WHETHER A LIBRARY ASSOCIATED WITH THE INTERFACE IS LOADED
    Publication number: 20130275573
    Abstract: An interface monitoring system, method and computer program product are provided. In use, an interface is identified. In addition, monitoring of the interface is deferred based on whether a library associated with the interface is loaded.
    Type: Application
    Filed: October 20, 2006
    Publication date: October 17, 2013
    Inventors: Gregory William Dalcher, Joe C. Lowe
  • BEHAVIORAL TRACKING SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR UNDOING EVENTS BASED ON USER INPUT
    Publication number: 20130276107
    Abstract: A behavioral tracking system, method, and computer program product are provided for undoing events based on user input. In use, a plurality of unclassified events is identified on a system utilizing behavioral tracking. Additionally, input associated with at least one of the unclassified events is received from a user of the system for classifying the at least one of the unclassified events as an unwanted event. Further, the at least one unwanted event is undone in response to the receipt of the input.
    Type: Application
    Filed: September 3, 2010
    Publication date: October 17, 2013
    Applicant: MCAFEE, INC.
    Inventors: Jonathan L. Edwards, Joel R. Spurlock, Gregory William Dalcher
  • SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR CONDITIONALLY PREVENTING USE OF HARDWARE VIRTUALIZATION
    Publication number: 20130275963
    Abstract: A system, method, and computer program product are provided for conditionally preventing use of hardware virtualization. In use, an attempt to use hardware virtualization is identified. Further, the use of the hardware virtualization is conditionally prevented.
    Type: Application
    Filed: October 5, 2007
    Publication date: October 17, 2013
    Inventors: Peter Blaimschein, Thomas C.H. Steiner, Gregory William Dalcher, John Douglas Teddy
  • SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR DETERMINING WHETHER A SECURITY STATUS OF DATA IS KNOWN AT A SERVER
    Publication number: 20130276120
    Abstract: A system, method, and computer program product are provided for determining whether a security status of data is known at a server. In use, a request for a security status of data is received over a network at a server. Additionally, it is determined whether the security status is known at the server using at least one of a whitelist and a blacklist. Furthermore, a result of the determination is transmitted over the network.
    Type: Application
    Filed: June 2, 2008
    Publication date: October 17, 2013
    Inventors: Gregory William Dalcher, Jonathan L. Edwards
  • System, method and computer program product for monitoring and/or analyzing at least one aspect of an invocation of an interface
    Patent number: 8561176
    Abstract: A system, method and computer program product are provided. In use, execution of a portion of internal code of an interface is identified. Further, in response to the execution of the portion of internal code, at least one aspect of an invocation of the interface is monitored and/or analyzed.
    Type: Grant
    Filed: January 24, 2007
    Date of Patent: October 15, 2013
    Assignee: McAfee, Inc.
    Inventor: Gregory William Dalcher