Method and device for innoculating email infected with a virus
US6910134B1 · kind B1 · utility
Assignee
Inventors
Key dates
| Filing date | Aug 29, 2000 |
| Grant date | Jun 21, 2005 |
| Priority date | — |
| Expiry date | Sep 18, 2022 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F21/568
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
A method and device for detecting and inoculating emails infected with viruses are described. The method involves identifying a particular traffic and its associated data packets as an email session and scanning the associated data packets in order to compare their contents with a database of known signatures. If a match is found between the data packets and a signature of a known virus, it is determined if there is an attachment to the email. If an attachment is detected, some or all of the bits of the data packets associated with the attachment are altered, thereby rendering the infected attachment harmless. The network device includes memory for storing the database of known signatures and a content processor able to compare the contents of data packets with a database of known signatures. The content processor is also operable to alter some or all of the bits of the attachment to inoculate the email and attachment.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.