Matthew Thomas Cote

US Patent:

20160337380, Nov 17, 2016

Filed:

May 11, 2016

Appl. No.:

15/151855

Inventors:

- Reston VA, US
Michael Lapilla - Washington DC, US
Trevor Tonn - McLean VA, US
Gregory Sinclair - Concord NC, US
Blake Hartstein - Leesburg VA, US
Matthew Cote - Reston VA, US

International Classification:

H04L 29/06

Abstract:

Systems and methods are provided for malware scanning and detection in a computing system. In one exemplary embodiment, the method includes launching, in a computing device of the computing system, a virtual machine, and launching, in the virtual machine of the computing device, an internet browser. The method also includes requesting, by the internet browser, data from a web page, and performing, using one or more analysis tools, analysis on the web page. In the method, performing analysis on the web page includes performing monitoring and recording of system application programming interface (API) calls, and creating software objects associated with the web page. The method also includes performing antivirus scanning of the software objects, de-obfuscating JavaScript associated with the software objects, and correlating data associated with the performed analysis to determine if the web page is a malicious web page.

US Patent:

20140380482, Dec 25, 2014

Filed:

Sep 8, 2014

Appl. No.:

14/480289

Inventors:

- Reston VA, US
Michael Lapilla - Washington DC, US
Trevor Tonn - McLean VA, US
Gregory Sinclair - Concord NC, US
Blake Hartstein - Leesburg VA, US
Matthew Cote - Reston VA, US

International Classification:

H04L 29/06
G06F 9/455

US Classification:

726 24, 726 23

Abstract:

Systems and methods are provided for malware scanning and detection in a computing system. In one exemplary embodiment, the method includes launching, in a computing device of the computing system, a virtual machine, and launching, in the virtual machine of the computing device, an internet browser. The method also includes requesting, by the internet browser, data from a web page, and performing, using one or more analysis tools, analysis on the web page. In the method, performing analysis on the web page includes performing monitoring and recording of system application programming interface (API) calls, and creating software objects associated with the web page. The method also includes performing antivirus scanning of the software objects, de-obfuscating JavaScript associated with the software objects, and correlating data associated with the performed analysis to determine if the web page is a malicious web page.