Patents by Inventor Stefan Finke

Stefan Finke has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Patent number: 10127380
    Abstract: Particular embodiments described herein provide for an electronic device that can be configured to receive script data, determine a checksum tree for the script data, compare each checksum of the checksum tree to one or more subtree checksums, and assign one or more classifications to the script data. In one example, the checksum tree is an abstract syntax tree.
    Type: Grant
    Filed: June 2, 2017
    Date of Patent: November 13, 2018
    Assignee: McAfee, LLC
    Inventors: Christoph Alme, Slawa Hahn, Stefan Finke
  • Patent number: 9846774
    Abstract: Particular embodiments described herein provide for an electronic device that can be configured to identify an application, run the application, log the parameters for each function call of the application, and store the logged parameters in an emulation table. The logged parameters can include a function call, input parameters, and output parameters. The emulation table can be used to simulate execution of an application without having to actually run the application.
    Type: Grant
    Filed: June 27, 2015
    Date of Patent: December 19, 2017
    Assignee: McAfee, LLC
    Inventors: Christoph Alme, Slawa Hahn, Stefan Finke
  • Publication number: 20170270298
    Abstract: Particular embodiments described herein provide for an electronic device that can be configured to receive script data, determine a checksum tree for the script data, compare each checksum of the checksum tree to one or more subtree checksums, and assign one or more classifications to the script data. In one example, the checksum tree is an abstract syntax tree.
    Type: Application
    Filed: June 2, 2017
    Publication date: September 21, 2017
    Applicant: McAfee, Inc.
    Inventors: Christoph Alme, Slawa Hahn, Stefan Finke
  • Patent number: 9672357
    Abstract: Particular embodiments described herein provide for an electronic device that can be configured to receive script data, determine a checksum tree for the script data, compare each checksum of the checksum tree to one or more subtree checksums, and assign one or more classifications to the script data. In one example, the checksum tree is an abstract syntax tree.
    Type: Grant
    Filed: June 26, 2015
    Date of Patent: June 6, 2017
    Assignee: McAfee, Inc.
    Inventors: Christoph Alme, Slawa Hahn, Stefan Finke
  • Publication number: 20160378977
    Abstract: Particular embodiments described herein provide for an electronic device that can be configured to identify an application, run the application, log the parameters for each function call of the application, and store the logged parameters in an emulation table. The logged parameters can include a function call, input parameters, and output parameters. The emulation table can be used to simulate execution of an application without having to actually run the application.
    Type: Application
    Filed: June 27, 2015
    Publication date: December 29, 2016
    Applicant: MCAFEE, INC.
    Inventors: Christoph Alme, Slawa Hahn, Stefan Finke
  • Publication number: 20160253500
    Abstract: Particular embodiments described herein provide for an electronic device that can be configured to receive script data, determine a checksum tree for the script data, compare each checksum of the checksum tree to one or more subtree checksums, and assign one or more classifications to the script data. In one example, the checksum tree is an abstract syntax tree.
    Type: Application
    Filed: June 26, 2015
    Publication date: September 1, 2016
    Applicant: MCAFEE, INC.
    Inventors: Christoph Alme, Slawa Hahn, Stefan Finke
  • Publication number: 20130152200
    Abstract: A method for preventing malware attacks includes identifying a set of data whose malware status is not known to be safe, launching an application using the data, determining that one or more prior memory allocations have been created by the application, determining that a new memory allocation has been created by the application, comparing the new memory allocation to the prior memory allocations, and based on the comparison, determining whether the data includes malware.
    Type: Application
    Filed: December 9, 2011
    Publication date: June 13, 2013
    Inventors: Christoph Alme, Stefan Finke