Feeds

Trend gets security patent for Java code defence

Next gen virus blocking or marketing ploy?

  • alert
  • submit to reddit

Securing Web Applications Made Simple and Scalable

Updated Trend Micro has secured the patent for a technique to detect malicious code in Java or Active X applets.

According to Reuters, Trend believes patent will help put it ahead of its competitors in protecting mobile devices and phones for the next wave of computer viruses. The agency reports it is in talks with an unspecified number of telcos about licensing agreements concerning its technology.

Scanning to detect the action of malicious Java or ActiveX applets on mobile phones is more difficult because they have such limited memory, and Trend reckons its technology gets around this limitation. We have our doubts that it has an exclusive on this.

Most of the major players in the AV space (such as NAI and F-Secure) are developing software that will protect phone and handhelds from malicious code, even though (for now) the problem is largely theoretical. There's also firms like Finjan that specialise in defending against mobile code.

Patents normally suggest technical innovation but as far as the antiviral market goes history has shown the US patents have been more commonly used as legal and marketing weapons in a fiercely competitive market. For example, Symantec and McAfee lawyers have been arguing about the scope of their respective patents for years, and ultimately users end up footing the bill for this legal bunfight. ®

Updated

Trend has now posted a statement on US patent 6,272,641 which describes a "multi-tiered process that involves server-based scanning and malicious code filtering at the Internet gateway, followed when necessary by real-time behaviour analysis at the client browser.

"In that final step, a suspect application is wrapped in security monitoring code, which causes it to terminate immediately upon any forbidden behaviour."

The patented technology is part of Trend Micro's InterScan AppletTrap which only blocks malicious java applets. The patent, extends to ActiveX controls, and if Trend shipped a product that included this it would be very useful, and would set its products apart.

Related Stories

NAI patents virus update over the Internet
McAfee files patents for security as a service
Symantec under attack over security patents

External Links

Reuters: Trend Micro wins Java virus scan patent

The smart choice: opportunity from uncertainty

More from The Register

next story
Mozilla fixes CRITICAL security holes in Firefox, urges v31 upgrade
Misc memory hazards 'could be exploited' - and guess what, one's a Javascript vuln
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Don't look, Snowden: Security biz chases Tails with zero-day flaws alert
Exodus vows not to sell secrets of whistleblower's favorite OS
Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like Yahoo!'s
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.