Abstract: A method and system provide and utilize obfuscated fonts for displayable content. Responsive to a request for displayable content having text, a text portion of the requested displayable content to be obfuscated is determined. For that text portion, obfuscated fonts are provided, by retrieving obfuscated fonts or by generating obfuscated fonts from a set of obfuscated glyphs created from a plurality of glyphs representative of a plurality of characters of the text portion of the displayable content. The obfuscated fonts can be created by assigning obfuscated glyphs of the set into the obfuscated fonts in accordance with one or more messages. The obfuscated fonts are mapped by assigning a value to each obfuscated glyph in the set that is different from an original value of the glyph.

Abstract: The embodiments present a new class of content masking defenses against the Portable Document Format (PDF) standard. The defenses can identify attacks that cause documents to appear different than the underlying content extracted from the documents. A content masking defense method can include identifying a content masking attack by scanning a document file to extract a character code of a character appearing in the file. Next, the character is rendered based on a font that is embedded in the document file. Optical character recognition can be performed on the rendering, and a content masking attack can be identified based on a comparison of a result of the optical character recognition against the character code of the character.

Abstract: The embodiments present a new class of content masking attacks against the Portable Document Format (PDF) standard. The attacks cause documents to appear different than the underlying content extracted from the documents by information-based services. The first attack allows academic paper writers and reviewers to collude via subverting the automatic reviewer assignment systems in current use by academic conferences. The second attack renders plagiarism detection software ineffective, targeting specific small plagiarism similarity scores to appear natural and evade detection. The final attack places masked content into the indexes for various search engines, which renders as information entirely different from the keywords used to locate it. The final attack enables spam, profane, or possibly illegal content to go unnoticed by these search engines but still be returned in search results.

Abstract: The invention discloses a file protecting method and a system therefor, relating to the information security field. The method includes: an application receives an instruction for opening a protected file sent by a user and invokes an upper interface of an operation system, and the upper interface sends an instruction for opening the protected file sent by a file system, and a filter driver intercepts the instruction for opening the protected file sent by the upper-layer interface to the file system, if the filter driver determines that the application is valid, it creates an image file on a virtual disk for the protected file, and returns a handler of the image file and reads or writes the protected file by the handler, which avoids a possible disclosure of plain text of the protected file in a buffer in prior art.

Abstract: Methods and systems for classifying incoming and/or outgoing packets to sessions in a media gateway store session identifiers for active sessions in a media gateway in a memory. Each session identifier is a combination of a local network address, a local port number, a remote network address, and a remote port number for the session. Alternatively, each session identifier is a combination of a local network address and a local port number. An incoming and/or outgoing packet is classified to one of the active sessions by using network address and port number information from the packet to perform a lookup for a corresponding session identifier in the memory.