`Case 3:17-cv-05659-WHA Document 415-6 Filed 04/05/19 Page 1 of 2
`
`
`
`
`
`EXHIBIT 5
`EXHIBIT 5
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`Case 3:17-cv-05659-WHA Document 415-6 Filed 04/05/19 Page 2 of 2
`Case 3:17-cv-05659-WHA Document 415-6 Filed 04/05/19 Page 2 of 2
`
`replace the call to the original function with a corresponding call
`
`to a substitute function, the substitute function being operational to send
`the input for inspection; and
`determine whetherit is safe for a computer to invoke the .
`
`original function with the input.
`
`48.
`
`A method for protecting a computer from dynamically generated
`
`malicious content, comprising:
`processing content received over a network, the content
`including a call to a first function, and the call including an input;
`
`transmitting the input to a security computer for inspection,
`
`when the first function is invoked;
`receiving from the security computer an indicator of whether it is .
`safe to invoke a second function with the input; and
`invoking the second function with the input, only if the indicator
`indicates that such invocation is safe. -
`
`49.
`
`The method of claim 48 further comprising:
`
`suspending processing of the content after said transmitting the
`
`input to the security computer; and
`,
`resuming processing of the content after said receiving the
`
`indicator from the security computer.
`
`50.
`
`A system for protecting a computer from dynamically generated
`
`~ malicious content, comprising:
`
`a content processor (i) for processing content received over a
`
`network, the content including a call to a first function, and the call
`
`Atty. Docket No. P-9216-US
`
`-51-
`
`