WIPO logo
Mobile | Deutsch | Español | Français | 日本語 | 한국어 | Português | Русский | 中文 | العربية |
PATENTSCOPE

Search International and National Patent Collections
World Intellectual Property Organization
Options
Query Language
Stem
Sort by:
List Length
Some content of this application is unavailable at the moment.
If this situation persist, please contact us atFeedback&Contact
1. (WO2018022259) REMEDIATION FOR RANSOMWARE ATTACKS ON CLOUD DRIVE FOLDERS
Latest bibliographic data on file with the International Bureau    Submit observation

Pub. No.: WO/2018/022259 International Application No.: PCT/US2017/040644
Publication Date: 01.02.2018 International Filing Date: 05.07.2017
IPC:
G06F 21/56 (2013.01)
G PHYSICS
06
COMPUTING; CALCULATING; COUNTING
F
ELECTRIC DIGITAL DATA PROCESSING
21
Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
50
Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
55
Detecting local intrusion or implementing counter-measures
56
Computer malware detection or handling, e.g. anti-virus arrangements
Applicants: MICROSOFT TECHNOLOGY LICENSING, LLC[US/US]; One Microsoft Way Redmond, Washington 98052-6399, US
Inventors: IWANIR, Elad; US
LAHAV, Chen; US
TAMIR, Gal; US
Agent: MINHAS, Sandip; US
CHEN, Wei-Chen Nicholas; US
DRAKOS, Katherine J.; US
HINOJOSA, Brianna L.; US
HOLMES, Danielle J.; US
SWAIN, Cassandra T.; US
WONG, Thomas S.; US
CHOI, Daniel; US
HWANG, William C.; US
WIGHT, Stephen A.; US
Priority Data:
15/375,00109.12.2016US
62/367,06026.07.2016US
Title (EN) REMEDIATION FOR RANSOMWARE ATTACKS ON CLOUD DRIVE FOLDERS
(FR) REMÉDIATION À DES ATTAQUES PAR LOGICIEL RANÇONNEUR SUR DES DOSSIERS EN INFONUAGIQUE
Abstract:
(EN) A system for detecting by a cloud service a ransomware attack on a client device is provided. The system monitors changes to files of the client device that are stored by the cloud service. The system assesses whether a change to a file appears to be malicious in that the change may be caused by ransomware. When the change to the file appears to be malicious, the system performs a countermeasure to prevent synchronization of files of the client device with other client devices and with the cloud service to prevent the propagating of files from the client device, which is undergoing a ransomware attack.
(FR) L'invention concerne un système pour détecter, par un service d'infonuagique, une attaque par logiciel rançonneur sur un dispositif client. Le système surveille les changements apportés aux fichiers du dispositif client qui sont stockés par le service d'infonuagique. Le système évalue si un changement dans un fichier semble être malveillant en ce que le changement peut être provoqué par le logiciel rançonneur. Lorsque le changement du fichier semble être malveillant, le système effectue une contre-mesure pour empêcher la synchronisation des fichiers du dispositif client avec d'autres dispositifs clients et avec le service d'infonuagique afin d'empêcher la propagation de fichiers en provenance du dispositif client, qui subit une attaque par logiciel rançonneur.
front page image
Designated States: AE, AG, AL, AM, AO, AT, AU, AZ, BA, BB, BG, BH, BN, BR, BW, BY, BZ, CA, CH, CL, CN, CO, CR, CU, CZ, DE, DJ, DK, DM, DO, DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, GT, HN, HR, HU, ID, IL, IN, IR, IS, JO, JP, KE, KG, KH, KN, KP, KR, KW, KZ, LA, LC, LK, LR, LS, LU, LY, MA, MD, ME, MG, MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, OM, PA, PE, PG, PH, PL, PT, QA, RO, RS, RU, RW, SA, SC, SD, SE, SG, SK, SL, SM, ST, SV, SY, TH, TJ, TM, TN, TR, TT, TZ, UA, UG, US, UZ, VC, VN, ZA, ZM, ZW
African Regional Intellectual Property Organization (ARIPO) (BW, GH, GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, ST, SZ, TZ, UG, ZM, ZW)
Eurasian Patent Office (AM, AZ, BY, KG, KZ, RU, TJ, TM)
European Patent Office (EPO) (AL, AT, BE, BG, CH, CY, CZ, DE, DK, EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, SM, TR)
African Intellectual Property Organization (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, KM, ML, MR, NE, SN, TD, TG)
Publication Language: English (EN)
Filing Language: English (EN)