`Case 3:17-cv-05659-WHA Document 499-3 Filed 05/30/19 Page 1 of 4
`
`
`
`EXHIBIT 11
`EXHIBIT 11
`
`UNREDACTED VERSION OF
`UNREDACTED VERSION OF
`DOCUMENT SOUGHT TO BE
`DOCUMENT SOUGHT TO BE
`SEALED
`SEALED
`
`
`
`
`
`
`
`Case 3:17-cv-05659-WHA Document 499-3 Filed 05/30/19 Page 2 of 4
`
` UNITED STATES DISTRICT COURT
` NORTHERN DISTRICT OF CALIFORNIA
` SAN FRANCISCO DIVISION
`- - - - - - - - - - - - - - - - - -x
`FINJAN, INC., a Delaware : Case No.
`Corporation, : 3:17-cv-05659-WHA
` Plaintiff, :
`v. :
`JUNIPER NETWORKS, INC., a :
`Delaware Corporation, :
` Defendant. :
`- - - - - - - - - - - - - - - - - -x
`
` HIGHLY CONFIDENTIAL SOURCE CODE - ATTORNEYS' EYES ONLY
`
` VIDEOTAPED DEPOSITION OF CHANDRA NAGARAJAN
` Sunnyvale, California
` Thursday, May 31, 2018
` 9:05 a.m.
`
`Job No.: 189837
`Pages: 1 - 245
`Reported By: Charlotte Lacey, RPR, CSR No. 14224
`
`1 2 3 4 5 6 7 8 9 1
`
`0
`11
`12
`13
`14
`15
`16
`17
`18
`19
`20
`21
`22
`23
`24
`25
`
`
`
`Case 3:17-cv-05659-WHA Document 499-3 Filed 05/30/19 Page 3 of 4
`HIGHLY CONFIDENTIAL SOURCE CODE - ATTORNEYS' EYES ONLY
`Transcript of Chandra Nagarajan
`Conducted on May 31, 2018
`
`33
`
`09:43:09
`09:43:12
`09:43:42
`09:43:47
`09:43:54
`09:43:54
`09:43:58
`09:44:01
`09:44:05
`09:44:13
`09:44:15
`09:44:17
`09:44:27
`09:44:31
`09:44:31
`09:44:36
`09:44:40
`09:44:44
`09:44:47
`09:44:51
`09:44:54
`09:44:59
`09:45:04
`09:45:11
`09:45:16
`
`adapters determine the threat level for the file, which
`is the primary -- primary goal of this ATP product.
` Q Have you heard of something called Joe static?
` A That is a Joe static adapter also in the -- in
`the -- in the series of analysis.
` Q What does Joe static do?
` A The Joe static is -- is a -- we have -- we
`have a license and software from Joe Security, and then
`it does the static analysis as -- as -- the adapter does
`static analysis from the Joe Security product.
` Q Do you know how Joe static works?
` A I -- I don't know how Joe static works. We...
` Q Have you heard of something called Joe
`Sandbox?
` A The Joe Sandbox is also the -- is a -- is a
`dynamic analysis product from Joe Security, and we use
`that as part of your product for dynamic analysis.
` Q Do you know how does Joe Sandbox work?
` A So we -- we -- we have not developed this Joe
`Sandbox, so it's a licensed software. So I'm not fully
`aware of how it works. But the idea -- the main idea is
`to execute the file in the -- in an environment and
`capture all the behaviors once it runs, and -- and
`then -- and then capture all the behaviors, and based on
`that, determine the threat level.
`
`1 2 3 4 5 6 7 8 9 1
`
`0
`11
`12
`13
`14
`15
`16
`17
`18
`19
`20
`21
`22
`23
`24
`25
`
`PLANET DEPOS
`888.433.3767 | WWW.PLANETDEPOS.COM
`
`
`
`Case 3:17-cv-05659-WHA Document 499-3 Filed 05/30/19 Page 4 of 4
`HIGHLY CONFIDENTIAL SOURCE CODE - ATTORNEYS' EYES ONLY
`Transcript of Chandra Nagarajan
`Conducted on May 31, 2018
`
`34
`
`09:45:17
`09:45:22
`09:45:25
`09:45:33
`09:45:38
`09:45:42
`09:45:47
`09:45:50
`09:45:57
`09:46:00
`09:46:06
`09:46:11
`09:46:12
`09:46:16
`09:46:16
`09:46:20
`09:46:26
`09:46:30
`09:46:36
`09:46:41
`09:46:44
`09:46:47
`09:46:47
`09:46:50
`09:46:54
`
` So it's really an isolated environment where
`you're safe to execute a file and run a file and then
`watch its behaviors and -- in a very dynamic fashion.
` Q Is Joe Sandbox different from deception?
` A Joe Sandbox, it is -- it is -- it is one and
`the same. So what -- what we have done is there are --
`there are -- it's a third-party software. We have added
`one or two functionalities there to -- to -- in that --
`during the dynamic analysis to watch for. And it's
`really the same -- same -- same adapter. Deception
`and -- is -- deception is just a -- an adapter that this
`Joe Security runs.
` Q What are the one or two functionalities that
`are added?
` A So I, again, I can give a representative one
`or two, but it's a thing we should refer to the code to
`do -- to check all the things. For example, we try to
`insert a fake USB or something and see how the program
`will behave if there is a USB in a dynamic fashion. So
`that is one of the things that happen. I think there
`are six or seven more things which -- which is like
`that.
` Q Can you describe the six or more things?
` A I -- I can't -- I'm not able to recollect all
`the six things. The whatever -- the one thing which I
`
`1 2 3 4 5 6 7 8 9 1
`
`0
`11
`12
`13
`14
`15
`16
`17
`18
`19
`20
`21
`22
`23
`24
`25
`
`PLANET DEPOS
`888.433.3767 | WWW.PLANETDEPOS.COM
`
`