Patent · US Active

System and method for protecting network resources

US11516247B2 · kind B2 · utility

0Cited by
1References
12Claims
0Family size

Assignee

Inventors

Key dates

Filing dateDec 11, 2019
Grant dateNov 29, 2022
Priority date
Expiry dateAug 27, 2040

Classification

  • Technology area (CPC H)Electricity
  • CPC primaryH04L63/1416
  • WIPO fieldDigital communication
  • WIPO sectorElectrical engineering

Abstract

The present disclosure includes methods and systems for protecting network resources. An exemplary method comprises starting, by a processor, copy-on-write snapshotting for modifications to a plurality of files in storage, the modification initiated by a suspicious application, detecting, by the processor, a modification of a file of the plurality of files, determining, by the processor, whether the file is stored on a shared network resource or a local resource, in response to determining that the file is stored on a shared network resource, determining, by the processor, that a current region being modified is not already saved in a snapshot, and if the current region is not saved, saving the current region to a snapshot, marking, by the processor, the current region as being saved and analyzing all saved regions that were modified for malicious activity to determine that the suspicious application modifying the saved regions is malicious.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.