Rowan M Trollope

US Patent:

7827311, Nov 2, 2010

Filed:

May 9, 2007

Appl. No.:

11/746188

Inventors:

Shaun Cooley - El Segundo CA, US
Rowan Trollope - Los Angeles CA, US

Assignee:

Symantec Corporation - Mountain View CA

International Classification:

G06F 15/16
G06F 15/173
G06F 11/00

US Classification:

709245, 709225, 726 2, 726 23

Abstract:

HTTP requests initiated from a web browser of a client computer system are proxied prior to release to a router, such as a home router. HTTP requests identifying a referrer URL corresponding to routable, public IP address and a target URL corresponding to a non-routable, private IP address are determined to be indicative of a drive-by pharming attack, and are blocked from sending to the router. HTTP requests not identifying a referrer URL corresponding to a routable, public IP address and a target URL corresponding to a non-routable, private IP address, the HTTP request are not determined to be indicative of a drive-by pharming attack, and are released for sending to the router. In some embodiments, an HTTP response received in response to a released HTTP request is proxied prior to release to the web browser. An HTTP response having content of type text/html or script is modified as indicated to prevent malicious activity and released to the web browser.

US Patent:

8312539, Nov 13, 2012

Filed:

Jul 11, 2008

Appl. No.:

12/172046

Inventors:

Carey S. Nachenberg - Northridge CA, US
Rowan Trollope - Woodland Hills CA, US

Assignee:

Symantec Corporation - Mountain View CA

International Classification:

G06F 11/00
G06F 11/30
G06F 3/048

US Classification:

726 22, 726 23, 726 24, 713188, 715808

Abstract:

A user-assisted security software program alerts a user when a new pop-up is displayed from a suspicious source application. If the source application may be suspicious if it has a low reputation. Displayed in connection with the pop-up, the alert prompts the user to indicate whether the source application that generated the pop-up should be trusted. If the user indicates that the source application is not trusted, the security software declares the source application to be malicious. The malicious code can then be dealt with, such as by removing it from the computing system, blocking it from generating new pop-ups, and preventing further network communications. The user's feedback about the source application may also be used to adjust the application's reputation.

US Patent:

6230285, May 8, 2001

Filed:

Sep 8, 1998

Appl. No.:

9/149527

Inventors:

Richard S. Sadowsky - San Jose CA
Henri J. Isenberg - Los Angeles CA
Rowan Trollope - Woodland Hills CA

Assignee:

Symantec Corporation - Cupertino CA

International Classification:

G06F 1100

US Classification:

714 14

Abstract:

A boot failure recovery system operates to diagnose a failed system boot in a computer operating system which boots by bootstrapping from a boot sector (12) of a storage medium (10) using configuration information (82). The boot failure recovery system includes an agent (24) which monitors operating system files used during system boot and which stores information regarding changes to the system files to a change file. A repair module (22) analyzes the change file to determine the cause of the failed system boot. A boot check module (16) responds to initiation of a system boot by determining if a prior system boot was successful. Boot check module (16) causes execution of a first boot sector code module (16) upon occurrence of a successful prior system boot and causes execution of the repair module (22) upon occurrence of a failed prior system boot.