 Methods and means for testing faults in a liquid crystal display system |
| An object of the invention is to improve liquid crystal display systems. Another object of the ... |
|
| System and method for prefetching data from a main computer memory into a cache memory |
| One form of the present invention is a method for managing data elements in a memory system. The ... |
|
| X-ray diagnostic apparatus for producing a transverse layer image |
| Referring now in detail to FIG. 1 of the drawing, in the installation illustrated therein, a ... |
|
| Method and apparatus for controlling an operation of plant |
| Accordingly, an object of the invention is to provide a method and an apparatus for controlling an ... |
|
| Temperature compensated eddy current sensor temperature measurement in turbine blade shroud monitor |
| The present invention is directed to a system for monitoring the temperature of a plurality of ... |
|
| Process control system and power plant process control system |
| An object of the present invention is to provide a process control system in which it is possible ... |
|
| Active gas turbine (jet) engine noise suppression |
| OF A PREFERRED EMBODIMENT FIG. 1A is a schematic diagram of a typical jet engine nacelle 114. The ... |
|
| Urban energy system for controlling an energy plant supplying energy to a community |
| It is an object of the invention to provide an urban energy system having functions such that the ... |
|
| Method of restricted space formation for working media motion |
| OF THE INVENTION In one aspect, the present invention provides a method of restricted space ... |
|
|
Method and system for the identification and the suppression of executable objects
| Details |
Inventors: Elgressy, Doron; Jospe, Asher;
Assignee: Computer Associates Think, Inc. (Islandia, NY)
Primary Examiner: Luu; Le Hien
Assistant Examiner:
Attorney, Agent or Firm:
A method for processing Executable Objects, comprising: (a) providing analysis means capable of non-interfering analysis of data packets transmitted on a communication line between a browser and an HTTP server on the web, said communication line being established through a gateway; (b) analyzing the handshake between said browser and said server, to detect a "GET_" command sent by the user and an HTTP code sent in response by said server; (c) when such an HTTP code is detected, analyzing the data packets transmitted by said server to said browser, by: (c.1) providing ordering means to order data packets received in non-sequential order, and to forward them in sequential order to header checking means; (c.2) checking the data packets so as to analyze the contents of the header of the Executable Object, and to identify the resources of the system that it needs to employ; (c.3) transmitting to said gateway data representing the resources of the system that the Executable Object needs to utilize; (c.4) providing data packet suppressing means coupled to said gateway, such that if the resources of the system that the Executable Object needs to utilize are not permitted according to the security policy set by the administrator, at least one data packet belonging to the Executable Object is suppressed, altered or damaged, so as to prevent the execution thereof by the browser. |
|
DETAILED DESCRIPTION It is an object of the present invention to provide an efficient method for processing Executable Objects which overcomes the aforesaid drawbacks of prior art systems.
It is another object of the invention to provide such a method which is easy to implement and which does not require significant hardware changes.
It is a further object of the invention to provide a method which permits to analyze the executables "on the fly", and does not hinder the downloading and he operation of harmless executables.
It is yet another object of the invention to provide apparatus for carrying out the method of the invention.
Other advantages and objects of the invention will become apparent as the description proceeds.
The invention is directed, inter alia, to a method for processing Executable Objects, comprising: (a) providing analysis means capable of non-interfering analysis of data packets transmitted on a communication line between a browser and an HTTP server on the web, said communication line being established through a gateway; (b) analyzing the handshake between said browser and said server, to detect a "GET_" command sent by the user and an HTTP code sent in response by said server; (c) when such an HTTP code is detected, analyzing the data packets transmitted by said server to said browser, by: (1) providing ordering means to order data packets received in non-sequential order, and to forward them in sequential order to header checking means; (2) checking the data packets so as to analyze the contents of the header of the Executable Object, and to identify the resources of the system that it needs to employ; (3) transmitting to said gateway data.
representing the resources of the system that the Executable Object needs to utilize; and (4) providing data packet suppressing means coupled to said gateway, such that if the resources of the system that the Executable Object needs to utilize are not permitted according to the security policy set by the administrator, at least one data packet belonging to the Executable Object is suppressed, altered or damaged, so as to prevent the execution thereof by the browser
|
| Related patents |
|
|
Internet weight reduction system
The basic hardware forming the basic setup of the present invention is shown in FIG. 1. A server computer 100, at a central location, stores a database of information, ...
|
|
|
Electronic schedule display apparatus
The present invention has been made in consideration of the above situation and has as its object to provide an electronic schedule display apparatus which can ...
|
|
|
Method for selecting position-dependent actions of computer applications programs
The present invention provides a method which allows the user alternatives for selecting a computer application program action which is dependent on the position of a ...
|
|
|
Method and associated apparatus for forming image data metrics which achieve media compatibility for subsequent imaging application
In view of the foregoing, an object of the present invention is to provide an improved color imaging system. A further object of the present invention is to provide ...
|
|
|
Hexagonal mesh multiprocessor system
FIG. 1 is a schematic representation of a regular, nonhomogenous interconnection graph 10 which is formed of a plurality of processor nodes 11 coupled to one another. A...
|
|
|
Display control circuit
The present invention provides a display control circuit which comprises window coordinate data storing means for storing window coordinate data which specifies a window ...
|
|
|
Content-Addressable Memory capable of a high speed search
It is, therefore, an object of our invention to improve both the speed of operation as well as the stability of content-addressable memories. It is a further object of ...
|
|
|
Bubble domain circuit organization
This invention relates to a magnetic bubble domain chip organization using an improved multiple output replicator and decoder scheme. An improved multiple output ...
|
|
|
Bubble domain circuit organization
This invention describes a unique bubble memory chip organization which combines the advantages of the serial type organization such as major-minor chip and parallel ...
|
|
|
Multidimensional channel coding
Transmitter 10 of FIG. 1 includes a scrambler 104, encoder 110 and modulator 121. Scrambler 104, in particular, receives a stream of binary data from a data source 101 ...
|
|
|
Graphic Cards 
