Michael Arthur Greene

US Patent:

7480683, Jan 20, 2009

Filed:

Oct 1, 2004

Appl. No.:

10/956573

Inventors:

Steve Thomas - Boulder CO, US
Michael P. Greene - Boulder CO, US
Bradley D. Stowers - Mead CO, US

Assignee:

Webroot Software, Inc. - Boulder CO

International Classification:

G06F 17/30

US Classification:

707205, 707 6, 726 24

Abstract:

Systems for preventing pestware activity are described. One embodiment a heuristic engine configured to identify repeat pestware activity and configured to block the repeat pestware activity; an operating system pestware shield in communication with the heuristic engine, the operating system pestware shield configured to detect pestware activity and report the pestware activity to the heuristic engine; and a browser pestware shield in communication with the heuristic engine, the browser pestware shield configured to detect pestware activity and report the pestware activity to the heuristic engine.

US Patent:

7996898, Aug 9, 2011

Filed:

Oct 25, 2005

Appl. No.:

11/258536

Inventors:

Sarah L. Mood - Superior CO, US
Bradley D. Stowers - Mead CO, US
Michael P. Greene - Boulder CO, US

Assignee:

Webroot Software, Inc. - Broomfield CO

International Classification:

G06F 21/22

US Classification:

726 23, 726 22

Abstract:

A system and method for reducing false positive indications of pestware on a protected computer is disclosed. In one variation, the method includes tracking activities of a user at the protected computer, monitoring events at the protected computer, identifying events that are potentially indicative of pestware, comparing at least one of the events with at least one of the activities of the user and initiating, in response to the comparing indicating the activities of the user are unconnected with the events, a user prompt that informs the user about the events to enable the user to make a decision relative to managing the events.

US Patent:

20070016951, Jan 18, 2007

Filed:

Jul 13, 2005

Appl. No.:

11/180161

Inventors:

Paul Piccard - Longmont CO, US
Michael Greene - Boulder CO, US

International Classification:

G06F 12/14

US Classification:

726024000

Abstract:

Systems and methods for identifying sources of malware are described. In one embodiment, a system includes a malware detection module configured to determine that a protected computer includes malware. The system also includes a history log module configured to access a history log of the protected computer to identify a set of potential sources of the malware.

US Patent:

20070067842, Mar 22, 2007

Filed:

Aug 8, 2005

Appl. No.:

11/199468

Inventors:

Michael P. Greene - Boulder CO, US
Paul L. Piccard - Longmont CO, US

International Classification:

G06F 12/14

US Classification:

726024000

Abstract:

Systems and methods for collecting files related to malware are described. In one embodiment, a system includes a malware detection module configured to analyze a set of files of a protected computer to determine that a first file of the set of files is related to potential malware. The system also includes a malware reporting module configured to selectively transfer the first file to a host computer.

US Patent:

20070169191, Jul 19, 2007

Filed:

Jul 25, 2006

Appl. No.:

11/492581

Inventors:

Michael Greene - Boulder CO, US
Matt Parker - Broomfield CO, US

International Classification:

G06F 12/14

US Classification:

726022000

Abstract:

A method and system for detecting a keylogger that encrypts data captured on a computer. One illustrative embodiment acquires a first sample of a portion of a memory of a computer, the portion of the memory being associated with a running process on the computer; inputs to the computer, in a manner that mimics keyboard input, a first data pattern consisting of at least one occurrence of each of a first set of distinct sub-patterns; acquires a second sample of the portion of the memory; compares the first and second samples of the portion of the memory to identify at least one data segment in which the second sample has changed relative to the first sample; and flags the running process as a potential keylogger when the at least one data segment contains a second data pattern matching the overall sub-pattern structure of the first data pattern despite the particular sub-patterns making up the first and second data patterns being different.

US Patent:

20070300303, Dec 27, 2007

Filed:

Jun 21, 2006

Appl. No.:

11/472232

Inventors:

Michael P. Greene - Boulder CO, US
Paul Piccard - Longmont CO, US
Michael Stieber - Boulder CO, US

International Classification:

G06F 12/14
H04L 9/32
G06F 11/00
G06F 11/30
G06F 12/16
G06F 15/18
G08B 23/00

US Classification:

726 24, 713188

Abstract:

A method and system for removing pestware from a computer is described. One illustrative embodiment detects that pestware is present on a computer, automatically suspends connectivity of the computer with a network, and removes the pestware from the computer while the connectivity of the computer with the network is suspended. This prevents the pestware from downloading additional pestware from the network in response to a removal attempt.

US Patent:

20140200930, Jul 17, 2014

Filed:

Mar 17, 2014

Appl. No.:

14/217231

Inventors:

- Hermitage TN, US
Cheng-Sheng Peter Wu - Arcadia CA, US
Michael F. Greene - Boston MA, US
James C. Guszcza - Santa Monica CA, US
Jun Yan - Avon CT, US
Jonathan Vanden Bosch - Santa Monica CT, US
John R. Lucker - Simsbury CT, US

International Classification:

G06Q 40/08

US Classification:

705 4

Abstract:

Methods and systems for determining the importance of each of the variables, or combinations of variables, that contribute to the overall score generated by a predictive statistical model are presented. In a specialized case, for each variable in the model, an importance is calculated based on the calculated slope and deviance of the predictive variable. In a more general case, for each variable in the model, an importance is calculated based on setting that variable to have the average value for the data set, and then calculating the change in score. The totality of variables (or combinations thereof) is then ranked by the Δscore, or a magnitude of it, such as |Δscore|.