IP Library Granted Patent US 10,318,272
Granted Patent B1
US 10,318,272 · App. 15/474,067 · Granted Jun 11, 2019

Systems and methods for managing application updates

Inventors: Konstantin Manuilov (Tallinn, EE); Tatjana Fedotova (Tallinn, EE)
Assignee: Symantec Corporation
G06F8/65H04L67/22H04L67/34
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,318,272
App. No.
15/474,067
Granted
Jun 11, 2019
Kind
B1
Abstract

The disclosed computer-implemented method for managing application updates may include (i) recording network activity of a target application, (ii) recording an identifying attribute of the target application that is associated with a current version of the target application, (iii) determining, based on recording the identifying attribute, that the target application has attempted to update from a previous version of the target application to the current version of the target application, (iv) locating a portion of network activity that reveals how to manually update an instance of the previous version of the target application, and (v) perform, in response to locating the portion of network activity that reveals how to manually update the instance of the previous version of the target application, a security action to protect a user from a candidate security threat. Various other methods, systems, and computer-readable media are also disclosed.

Claims (47)

1. A computer-implemented method for managing application updates, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:

recording network activity of a target application;

recording an identifying attribute of the target application that is associated with a current version of the target application;

determining, based on recording the identifying attribute that is associated with the current version, that the target application has attempted to update from a previous version of the target application to the current version of the target application;

locating, within the recorded network activity, and in response to determining that the target application has attempted to update from the previous version of the target application to the current version, a portion of network activity that reveals how to manually update an instance of the previous version of the target application; and

performing, in response to locating the portion of network activity that reveals how to manually update the instance of the previous version of the target application, a security action to protect a user from a candidate security threat, wherein:

the portion of the network activity reveals a uniform resource locator where a download for updating the target application is available; and

the uniform resource locator dynamically changes between versions of the target application and the portion of network activity reveals how to dynamically generate the uniform resource locator for the current version of the target application.

2. The computer-implemented method of claim 1 , further comprising updating, after performing the security action, the instance of the previous version of the target application based on the portion of network activity that reveals how to manually update the instance rather than automatically updating the instance of the previous version of the target application through an auto-update function of the instance of the previous version of the target application.

3. The computer-implemented method of claim 1 , wherein the uniform resource locator dynamically changes between versions of the target application based on a file version of the current version of the target application.

4. The computer-implemented method of claim 1 , wherein the uniform resource locator dynamically changes between versions of the target application based on a date of releasing the target application.

5. The computer-implemented method of claim 1 , wherein the uniform resource locator dynamically changes between versions of the target application based on both:

a file version of the current version of the target application; and

a date of releasing the target application.

6. The computer-implemented method of claim 1 , wherein the identifying attribute that is associated with the current version comprises a file version number.

7. The computer-implemented method of claim 1 , wherein the identifying attribute that is associated with the current version comprises a hash of the current version of the target application.

8. The computer-implemented method of claim 1 , wherein determining that the target application has attempted to update from the previous version of the target application to the current version of the target application comprises determining that the identifying attribute has changed from a previous version of the identifying attribute.

9. The computer-implemented method of claim 1 , wherein locating, within the recorded network activity, the portion of network activity comprises matching the network activity, within a span of time, to the recording of the identifying attribute.

10. The computer-implemented method of claim 1 , wherein the security action comprises disabling an auto-update function of the instance of the previous version of the target application.

11. A system for managing application updates, the system comprising:

a recording module, stored in memory, that:

records network activity of a target application; and

records an identifying attribute of the target application that is associated with a current version of the target application;

a determination module, stored in memory, that determines, based on recording the identifying attribute that is associated with the current version, that the target application has attempted to update from a previous version of the target application to the current version of the target application;

a location module, stored in memory, that locates, within the recorded network activity, and in response to determining that the target application has attempted to update from the previous version of the target application to the current version, a portion of network activity that reveals how to manually update an instance of the previous version of the target application;

a performance module, stored in memory, that performs, in response to locating the portion of network activity that reveals how to manually update the instance of the previous version of the target application, a security action to protect a user from a candidate security threat; and

at least one physical processor configured to execute the recording module, the determination module, the location module, and the performance module, wherein:

the portion of the network activity reveals a uniform resource locator where a download for updating the target application is available; and

the uniform resource locator dynamically changes between versions of the target application and the portion of network activity reveals how to dynamically generate the uniform resource locator for the current version of the target application.

12. The system of claim 11 , wherein the performance module is further configured to update, after performing the security action, the instance of the previous version of the target application based on the portion of network activity that reveals how to manually update the instance rather than automatically updating the instance of the previous version of the target application through an auto-update function of the instance of the previous version of the target application.

13. The system of claim 11 , wherein the uniform resource locator dynamically changes between versions of the target application based on a file version of the current version of the target application.

14. The system of claim 11 , wherein the uniform resource locator dynamically changes between versions of the target application based on a date of releasing the target application.

15. The system of claim 11 , wherein the uniform resource locator dynamically changes between versions of the target application based on both:

a file version of the current version of the target application; and

a date of releasing the target application.

16. The system of claim 11 , wherein the identifying attribute that is associated with the current version comprises a file version number.

17. The system of claim 11 , wherein the identifying attribute that is associated with the current version comprises a hash of the current version of the target application.

18. The system of claim 11 , wherein the determination module is configured to determine that the target application has attempted to update from the previous version of the target application to the current version of the target application at least in part by determining that the identifying attribute has changed from a previous version of the identifying attribute.

19. The system of claim 11 , wherein the location module locates, within the recorded network activity, the portion of network activity by matching the network activity, within a span of time, to the recording of the identifying attribute.

20. A non-transitory computer-readable medium comprising one or more computer-readable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

record network activity of a target application;

record an identifying attribute of the target application that is associated with a current version of the target application;

determine, based on recording the identifying attribute that is associated with the current version, that the target application has attempted to update from a previous version of the target application to the current version of the target application;

locate, within the recorded network activity, and in response to determining that the target application has attempted to update from the previous version of the target application to the current version, a portion of network activity that reveals how to manually update an instance of the previous version of the target application; and

perform, in response to locating the portion of network activity that reveals how to manually update the instance of the previous version of the target application, a security action to protect a user from a candidate security threat, wherein:

the portion of the network activity reveals a uniform resource locator where a download for updating the target application is available; and

the uniform resource locator dynamically changes between versions of the target application and the portion of network activity reveals how to dynamically generate the uniform resource locator for the current version of the target application.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 21, 2019
From: SYMANTEC CORPORATION
To: CA, INC.
Reel/Frame 051144/0918 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 30, 2017
From: MANUILOV, KONSTANTIN; FEDOTOVA, TATJANA
To: SYMANTEC CORPORATION
Reel/Frame 041797/0107 →
Cited By (1)
US 12,430,125