Richard A Raines

US Patent:

20120260342, Oct 11, 2012

Filed:

Apr 3, 2012

Appl. No.:

13/438240

Inventors:

Thomas E. Dube - Beavercreek OH, US
Richard A. Raines - Centerville OH, US
Steven K. Rogers - Beavercreek OH, US

Assignee:

Government of the United States, as represented by the Secretary of the Air Force - Wright-Patterson AFB OH

International Classification:

G06F 21/00

US Classification:

726 24

Abstract:

A method, apparatus and program product are provided to recognize malware in a computing environment having at least one computer. A sample is received. An automatic determination is made by the at least one computer to determine if the sample is malware using static analysis methods. If the static analysis methods determine the sample is malware, dynamic analysis methods are used by the at least one computer to automatically determine if the sample is malware. If the dynamic analysis methods determine the sample is malware, the sample is presented to a malware analyst to adjudicate the automatic determinations of the static and dynamic analyses. If the adjudication determines the sample is malware, a response action is initiated to recover from or mitigate a threat of the sample.

US Patent:

20190052600, Feb 14, 2019

Filed:

Aug 13, 2018

Appl. No.:

16/102377

Inventors:

- Oak Ridge TN, US
Stacy J. Prowell - Oak Ridge TN, US
Richard A. Raines - Oak Ridge TN, US
Joseph P. Trien - Oak Ridge TN, US

International Classification:

H04L 29/06
H04L 12/939
H04L 12/66
H04L 12/24

Abstract:

A system and method includes an operational network that communicates with an external network by opening a first transmission protocol socket. A data diode coupled to the operational network and a gateway enables the one-way transfer of all information received from the external network and transmitted by the operational network to the gateway such that no information travels from the gateway to the operational network or the external network. The gateway opens a second transmission protocol socket by mapping a sequence number to an acknowledgement number and increasing that mapped acknowledgement number by a value of one. A transmitter then transmits the acknowledgment to a remote network or a gateway.