Abstract: A system, method, and computer program product are provided for initiating a security action at an intermediate layer coupled between a library and an application. In use, a library of data is stored. Additionally, system calls intended for operating on the data are produced, utilizing an application. Furthermore, the system calls are intercepted and a security action is initiated on the data in response to the interception, utilizing an intermediate layer between the library and the application.

Abstract: A system, method and computer program product are provided for securely generating signatures. Initially received is a request to generate a signature at a secure server. Then, the signature is automatically generated at the secure server utilizing a private key stored at the secure server. The signature is then transmitted from the secure server. Such signature is capable of being used to verify an authenticity of an update (i.e. data and/or software) for a computer utilizing a public key.

Abstract: A system, method and computer program product are provided for scanning a mobile wireless device for malware. Initially, a service agent is initiated utilizing a mobile wireless device. Next, information describing the mobile wireless device is transmitted to a back-end server over a wireless network utilizing the service agent of the mobile wireless device. An update is then received from the back-end server over the wireless network utilizing the service agent of the mobile wireless device. Subsequently, an anti-malware scanner installed on the mobile wireless device is updated so that the mobile wireless device may be scanned utilizing the updated anti-malware scanner.

Abstract: A system, method and computer program product are provided for scanning a mobile wireless device for malware. Initially, an update command is received from a user utilizing a graphical user interface of a mobile wireless device. An anti-malware scanner installed on the mobile wireless device is then updated over a wireless network in response to the update command. The mobile wireless device is then scanned utilizing the updated anti-malware scanner. Such anti-malware scanner may be conditionally updated based on the update command so as to regulate usage of the wireless network with the mobile wireless device.

Abstract: A system and method for secure and verified sharing of resources in a peer-to-peer network environment to facilitate efficient use of bandwidth are disclosed. The method for securely sharing resources over a peer-to-peer network generally comprises broadcasting a request by a requesting peer for a resource over the peer-to-peer network where the resource is identified with a resource version identifier, receiving a response from a responding peer on the peer-to-peer network indicating that the responding peer has the requested resource, retrieving the requested resource from the responding peer, and verifying the retrieved resource by ensuring the retrieved resource contains the version identifier embedded therein. Preferably, the verifying also includes verifying a digital signature, such as a 1024-bit VeriSign digital certificate, of the retrieved resource to ensure integrity of the retrieved resource.

Abstract: A system for providing application services in a computing environment having both user-mode processes and privileged-mode processes. A user-mode component is provided with an interface configured to access an exposed privileged-mode interface. A configuration component specifies a list of installable code components that are authorized for installation, wherein privileged-mode functions will only be executed in response to accesses by the user-mode code component when the installable code component is represented on the list.

Abstract: A system and method for distributed function discovery with third party responses in a peer-to-peer network to facilitate efficient use of bandwidth and resources are disclosed. The method for secure automatic selection of a designated service provider in a peer-to-peer network generally comprises broadcasting a digitally signed election initiating packet containing a value for at least one criteria by a sending node, awaiting response time-out period expiry or receipt of a response election packet, broadcasting a digitally signed election result packet indicating the sending node is the designated service provider if response time-out period expiry occurs prior to receipt of a response election packet, and awaiting for, verifying, and storing election result in an election result broadcast if receipt of a response election packet occurs prior to expiry of response time-out period.

Abstract: A system, method and computer program product are provided for scanning a mobile wireless device for malware. A scan command is initially received from a user utilizing a mobile wireless device. Further, a component manager of the mobile wireless device is instantiated in response to the scan command. An anti-malware scanner is then executed utilizing the component manager. Further, the mobile wireless device is scanned utilizing the anti-malware scanner.

Abstract: A system and method includes passive screening of transient messages in a distributed computing environment. A transient packet stream is passively monitored at a network boundary. Incoming datagrams structured in compliance with a network protocol layer are received. One or more of the incoming datagrams are reassembled into a segment structured in compliance with a transport protocol layer. Contents of the reassembled segment are scanned for a presence of at least one of a computer virus and malware to identify infected message contents.

Abstract: A system, method and computer program product are provided for categorizing data. In use, features are extracted from binary data. Such extracted features are compared with a predetermined set of features. Based, at least in part, on the comparison, the binary data is categorized.

Abstract: A system, method and computer program product are provided for accessing security or content analysis functionality utilizing a mobile communication device. Included is an operating system installed on a mobile communication device capable of communicating via a wireless network. Further provided is an application program installed on the mobile communication device and executed utilizing the operating system for performing tasks. A scanning subsystem remains in communication with the application program via an application program interface. Such scanning subsystem is adapted for accessing security or content analysis functionality in conjunction with the tasks performed by the application program.

Abstract: A method and system for updating anti-intrusion software is provided. In a preferred embodiment, a computer program product updates anti-intrusion software on a computer network which has an anti-intrusion monitor server. The anti-intrusion monitor server recognizes attacks on the computer network in accordance with attack pattern information contained in the anti-intrusion software. The computer program product includes computer code that installs modified attack pattern information onto a central anti-intrusion server, and computer code that transfers the modified attack pattern information from the central anti-intrusion server to the anti-intrusion monitor server using push technology. The result is that newly discovered attack patterns are capable of being rapidly communicated from the central anti-intrusion server to the computer network.

Abstract: A system, method and computer program product are provided for efficiently updating a scanning subsystem of a mobile communication device. Initially received is a first portion of an update adapted for updating a scanning subsystem of a mobile communication device. Further, more portions of the update are received in addition to the receipt of the first portion of the update. The update is then installed with the scanning subsystem.

Abstract: A system and method for providing Web browser-based remote network appliance configuration in a distributed computing environment is described. A query message is broadcast from an applet executing within a Web browser to one or more network appliances. The network appliances are interconnected within a bounded network domain defined by a common network address space. A response message containing network settings, including a physical network address, is received by the applet from at least one such network appliance responsive to the query message and processed. A configuration packet is generated and sent using the physical network address for each at least one such network appliance sending a response message and requiring configuration.

Abstract: A system and method for distributing portable computer virus definition records with binary file conversion are described. One or more virus definition records are stored into a structured virus database. Each virus definition record includes an identifier uniquely identifying a computer virus, at least one virus name associated with the computer virus, a virus definition sentence comprising object code providing operations to detect the identified computer virus within a computer system, and a virus removal sentence comprising object code providing operations to clean the identified computer virus from the computer system. At least one updated virus definition record is stored into the structured virus database indexed by the identifier and the at least one virus name for each virus definition record. The virus definition records stored in the structured virus database are converted into a virus data file. The virus data file includes virus definition sets.

Abstract: A system and method for securely confirming performance of a task by a peer in a peer-to-peer network environment using signed receipts are disclosed. The method generally comprises broadcasting a request over the network by a requesting peer for a task with respect to a remote non-local backend server, receiving a response containing a local alias URL pointing to a destination on a responding server node, forwarding the task to the local alias URL for performance by the responding server node, and verifying a digital signature of any receipt packet received from the responding server node to ensure that the receipt packet is from the remote non-local backend server. The method may also include placing the server node in a black list of the requesting peer if the verifying is unsuccessful.

Abstract: A system, method and computer program product are provided for scanning a plurality of mobile wireless devices for malware. A request is received to update an anti-malware scanner installed on a mobile wireless device over a wireless network. Further, an update tailored for the mobile wireless device is prepared using a back-end infrastructure. Such tailored update is then transmitted from the back-end infrastructure to the mobile wireless device over the wireless network.

Abstract: A system and method for providing telephonic content security service in a wireless network environment is described. A plurality of wireless devices interfacing over a network providing wireless telephonic services through a layered service architecture. Content security services are provisioned to the wireless devices via the layered service architecture. Each content security service is delivered through applications executing in a user layer on each wireless device. The provisioning of the content security services to each wireless device are supervised from a network operations center at which are maintained a master catalog of the applications and configured wireless devices list. Configuration of each wireless device is managed from a configuration client by consulting the master catalog and the configured wireless devices list and downloading the applications to each wireless device.

Abstract: A system, method and computer program product are provided for scanning a mobile wireless device for malware. Initially, a platform abstraction layer of a mobile wireless device is called. Further, an anti-malware scanner-related function module on the mobile wireless device is initiated utilizing the platform abstraction layer. Such platform abstraction layer enables the anti-malware scanner-related function module to be initiated on any of a plurality of different mobile wireless devices.

Abstract: A system, method and computer program product are provided for scanning a mobile wireless device for malware. Initially, an application service provider is initiated utilizing a mobile wireless device. Next, an anti-malware scanner installed on the mobile wireless device is updated over a wireless network utilizing the application service provider. The mobile wireless device is then scanned utilizing the updated anti-malware scanner.