`
`A0 i20(Rcv_ 08lI0
`
`T0‘
`
`Mail Stop 8
`Director ofthe u.s. Patent and Trademark Office
`P.O. Box I450
`Alexandria. VA 223I3-I450
`
`REPORT ON THE
`FILING OR DETERMINATION OF AN
`ACTION REGARDING A PATENT OR
`TRADEMARK
`
`_
`
`
`
`
`
`The Trustees of Columbia University in the
`City of New York
`
`Symantec Corporation
`
`
`
`
`
`
`
`
`In Compliance with 35 U.S.C. § 290 and/Or 15 U.S.C. § 1 I I6 you are hereby advised that a court action has been
`filed in the U.S. District Court
`Eastern District of Virginia. Richmond Division
`on the following
`U Tmdcmnrks or
`[1 Patents.
`( E] the patent action involves 35 U.S.C. § 292.):
`DOCKET NO.
`DATE FILED
`
`.
`.
`u.s. DISTRICT COURT
`
`DIZFENDANT
`Eastern District Of Vir inia, Richmond Division
`3: 1 3CV808
`12/5/2013
`
`PLAINTIFF
`
`
`
`
`
`
`
`
`DATE INCLUDED
`
`In the abovc——entitlcd case, the following patcnt(s)/ tmd::mtIrk(s) have been included:
`INCLUDED BY
`
`[3 Amendment
`
`C] Answer
`
`B Cross Bill
`
`C] Other Pleading
`
`HOLDER 0F PATENT OR TRADEMARK
`%’:{TfR(:FD';’m‘:l:
`_l.R/':31Em1l‘8(RNO
`_——
`_—
`——
`——
`——
`
`In the nhot-c———cntitIcd case. the following decision has been rendered orjudgcmcnt issucd:
`DECISION/JUDGEMENT
`
`
`
`
`
`CLERK
`
`(BY) DEPUTY CLERK
`
`DATE
`
`Fernando Galindo. Clerk
`
`Isl Carolyn Mccracken, Deputy Clerk
`
`12/6/2013
`
`Copy l—Upon initiation of action. mail this copy to Director Copy 3—l7pon termination of action. mail this copy to Director
`Copy 2—Upon filing document adding putt.-nt(s). mail this copy to Director Copy -l—Case file copy
`
`1
`
`SYMC 1002
`
`1
`
`SYMC 1002
`
`
`
`
`
`UNITED STATES PATENT AND TRADEMARK OFFICE
`
`UNITED STATES DEPARTMENT OF COMMERCE
`United States Patent and Trademark Office
`Address: COMMISSIONER FOR PATENTS
`P.O. Box 1450
`Alexandria, Virginia 22313-1450
`www.uspto.gov
`
`APPLICATION NO.
`
`12/091,150
`
`ISSUE DATE
`
`12/06/2011
`
`70763
`
`7590
`
`11/16/2011
`
`Byrne Poh LLP
`11 Broadway, Ste 814
`New York, NY 10004
`
`PATENT NO.
`
`ATTORNEY DOCKET NO.
`
`CONFIRMATION NO.
`
`8074115
`
`0315120.190-US2
`
`9935
`
`The projected patent number and issue date are specified above.
`
`ISSUE NOTIFICATION
`
`Determination of Patent Term Adjustment under 35 U.S.C. 154 (b)
`(application filed on or after May 29, 2000)
`
`The Patent Term Adjustment is 0 day(s). Any patent to issue from the above—identified application will include
`an indication of the adjustment on the front page.
`
`If a Continued Prosecution Application (CPA) was filed in the above—identified application, the filing date that
`determines Patent Term Adjustment is the filing date of the most recent CPA.
`
`Applicant will be able to obtain more detailed information by accessing the Patent Application Information
`Retrieval (PAIR) WEB site (http://pair.uspto. gov).
`
`Any questions regarding the Patent Term Extension or Adjustment determination should be directed to the
`Office of Patent Legal Administration at (571)-272-7702. Questions relating to issue and publication fee
`payments should be directed to the Application Assistance Unit (AAU) of the Office of Data Management
`(ODM) at (571)-272-4200.
`
`APPLICANT(S) (Please see PAIR WEB site http://pair.uspto. gov for additional applicants):
`
`Salvatore J. Stolfo, Ridgewood, NJ;
`Angelos D. Keromytis, New York, NY;
`Stelios Sidiroglou, New York, NY;
`
`IR103 (Rev. 10/09)
`
`2
`
`1
`
`2
`
`SYMC 1002
`
`
`
`PART B - FEE(S) TRANSMITTAL
`
`Complete and send this form, together with applicable fee(s), to: Mail Mail Stop ISSUE FEE
`Commissioner for Patents
`P.O. Box 1450
`Alexandria, Virginia 22313-1450
`or 1 (571)-273-2885
`
`through 5 should be completed where
`INSTRUCTIONS: This form should be used for transmitting the ISSUE FEE and PUBLICATION FEE (if required). Blocks 1
`appropriate. All further correspondence including the Patent, advance orders and notification of maintenance fees will be mailed to the current correspondence address as
`in icated unless corrected below or directed otherwise in Block 1, by (a) specifying a new correspondence address; and/or (b) indicating a separate "FEE ADDRESS" for
`maintenance fee notifications.
`
`CURRENT CORRESPONDENCE ADDRESS (Note: Use Blocklfor any Change Ofaddress)
`
`70763
`
`7590
`
`07/28/2011
`
`Byrne Poh LLP
`814
`1 1 B
`d
`S
`roa Ways
`te
`New York, NY 10004
`
`Note: A certificate of mailin can only be used for domestic mailings of the
`Fee(s) Transmittal. This certi icate cannot be used for any other accompanying
`Eapers. Each additional paper, such as an assignment or formal drawing, must
`ave its own certificate of mailing or transmission.
`
`Certificate of Mailing or Transmission
`I hereby certify that this Fee(s) Transmittal is being deposited with the United
`States Postal Service with sufficient postage for first class mail in an envelope
`addressed to the Mail Stop ISSUE FEE address above, or being facs1m1le
`transmitted to the USPTO (571) 273-2885, on the date indicated below.
`
`NXA Filed via EFS-Web
`
`
`
`(D°P0Sil0f'S flame)
`
`APPLICATION NO.
`
`FILING DATE
`
`F {ST NAMED INVENTOR
`
`ATTORNEY DOCKET NO.
`
`CONFIRMATION NO.
`
`0315120.190-US2
`Salvatore J. Stolfo
`06/15/2009
`12/091,150
`TITLE OF INVENTION: METHODS, MEDIA AND SYSTEMS FOR DETECTING ANOMALOUS PROGRAM EXECUTIONS
`
`9935
`
`APPLN. TYPE
`
`SMALL ENTITY
`
`ISSUE FEE DUE
`
`PUBLICATION FEE DUE
`
`PREV. PAID ISSUE FEE
`
`TOTAL FEE(S) DUE
`
`DATE DUE
`
`nonprovisional
`
`YES
`
`IQBAL, NADEEM
`
`$755
`
`2114
`
`$300
`
`$0
`
`$1055
`
`10/28/2011
`
`714-038 100
`
`1. Change of correspondence address or indication of "Fee Address" (37
`CFR 1.363).
`
`:1 Chan e of correspondence address (or Change of Correspondence
`Address orm PTO/SB/ 122) attached.
`
`:1 "Fee Address" indication (or "Fee Address" Indication form
`PTO/SB/47; Rev 03-02 or more recent) attached. Use of a Customer
`Vumber is required.
`
`2. For printing on the patent front page, list
`(1) the names of up to 3 registered patent attorneys
`or agents OR, alternatively,
`(2) the name of a single firm (having as a member a
`registered attorney or agent) and the names of up to
`2 registered patent attorneys or agents. If no name is
`listed, no name will be printed.
`
`
`
`1 Bvrne Poh L1’-‘P
`
`2
`
`3
`
`3. ASSIGNEE NAME AND RESIDENCE DATA TO BE PRINTED ON THE PATENT (print or type)
`If an assignee is identified below, the document has been filed for
`PLEASE NOTE: Unless an assignee is identified below, no assignee data will appear on the patent.
`recordation as set forth in 37 CFR 3.11. Completion of this form is NOT a substitute for filing an assignment.
`(A) NAME OF ASSIGNEE
`(B) RESIDENCE: (CITY and STATE OR COUNTRY)
`
`The Trustees of Columbia University in
`the City of New York
`Please check the appropriate assignee category or categories (will not be printed on the patent) :
`
`New Y01”k.» NY
`
`1] Individual
`
`Corporation or other private group entity 1] Government
`
`4a. The following fee(s) are submitted:
`2' Issue Fee
`
`4b. Payment of Fee(s): (Please first reapply any previously paid issue fee shown above)
`:1 A check is enclosed.
`
`3' Publication Fee (No small entity discount permitted)
`3 Advance Order — # of Copies
`
`Payment by creditcmd. Fees paid via EFS-VVeb
`The Director is hereby authorized to charge , any deficiency, or credit any
`overpayment, to Deposit Account Number
`50-4207
`(enclose an extra copy of this form).
`
`5. Change in Entity Status (from status indicated above)
`:1 b. Applicant is no longer claiming SMALL ENTITY status. See 37 CFR 1.27(g)(2).
`:1 a. Applicant claims SMALL ENTITY status. See 37 CFR 1.27.
`NOTE: The Issue Fee and Publication Fee (if required) will not be accepted from anyone other than the applicant; a registered attorney or agent; or the assignee or other party in
`interest as shown by the records of the United States Patent and Trademark Office.
`
`Authorized Signature
`
`/Pllllip R. POh/
`
`Typed or printed name
`
`Philip R. P011
`
`Date
`
`OCIOb€1‘ 28 201 1
`
`Registration No.
`
`51 176
`
`This collection of information is required by 37 CFR 1.311. The information is re uired to obtain or retain a benefit by the public which is to file (and by the USPTO to process)
`an application. Confidentiality is governed by 35 U.S.C. 122 and 37 CFR 1.14. T is collection is estimated to take 12 minutes to complete, including gathering, preparing, and
`submitting the completed application form to the USPTO. Time will v
`de endin upon the individual case. Any comments on the amount of time you require to complete
`this form and/or su gestions for reducing this burden, should be sent to
`e C ief In ormation Officer, U.S. Patent and Trademark Office, U.S. Department of Commerce, P.O.
`Box 1450, Alexan ria, Virginia 22313-1450. DO NOT SEND FEES OR COMPLETED FORMS TO THIS ADDRESS. SEND TO: Commissioner for Patents, P.O. Box 1450,
`Alexandria, Virginia 22313-1450.
`Under the Paperwork Reduction Act of 1995, no persons are required to respond to a collection of information unless it displays a valid OMB control number.
`
`PTOL-85 (Rev. 02/11) Approved for use through 08/31/2013.
`
`3
`OMB 0651-0033
`
`SYMC 1002
`U.S. Patent and Trademark Office; U.S. DEPARTMENT OF COMMERCE
`
`3
`
`SYMC 1002
`
`
`
`Electronic Patent Application Fee Transmittal
`
`Application Number:
`
`Filing Date:
`
`12091150
`
`15-Jun-2009
`
`Title of Invention:
`
`METHODS, MEDIA AND SYSTEMS FOR DETECTING ANOMALOUS PROGRAM
`EXECUHONS
`
`First Named Inventor/Applicant Name:
`
`Salvatore J. Stolfo
`
`Attorney Docket Number:
`
`0315120.190—US2
`
`Filed as Small Entity
`
`U.S. National Stage under 35 USC 371 Filing Fees
`
`Description
`
`Fee Code
`
`Quantity
`
`Sub-Total in
`USD($)
`
`Basic Filing:
`
`Pages:
`
`Claims:
`
`Miscellaneous-Filing:
`
`Patent-Appeals-and-Interference:
`
`Post-AlIowance-and-Post-Issuance:
`
`Publ. Fee- early, voluntary, or normal
`
`1504
`
`1
`
`300
`
`300
`
`H
`
`II
`
`4
`
`SYMC 1002
`
`
`
` S“:-S1-|;(t$a)| In
`
`1170
`
`Total in USD ($)
`
`5
`
`SYMC 1002
`
`5
`
`SYMC 1002
`
`
`
`Electronic Acknowledgement Receipt
`
`M—
`
`Title of Invention:
`
`METHODS, MEDIA AND SYSTEMS FOR DETECTING ANOMALOUS PROGRAM
`EXECUHONS
`
`I—
`
`Payment information:
`
`yes—
`Submitted with Payment
`
`‘
`
`—Authorized User
`The Director of the USPTO is hereby authorized to charge indicated fees and credit any overpayment as follows:
`
`POH,PH|L|P R
`
`Charge any Additional Fees required under 37 C.F.R. 1.492 (National application filing, search, and examination fees)
`
`Charge any Additional Fees required under 37 C.F.R. Section 1 7 (Patent application and reexamination o
`
`o
`
`-
`
`T
`
`6
`
`SYMC 1002
`
`
`
`File Listing:
`
`Document
`
`Information:
`
`Information:
`
`.
`
`.
`
`File Size(Bytes)/
`
`Multi
`
`Pages
`
`Issue Fee Payment (PTO-85B)
`
`0315120_190_US2_|ssueFeeTra
`nsmittal pdf
`
`c3e96887800fd00l 5db05bf9b57d620al b5
`486ee
`
`295643
`
`Fee Worksheet (SB06)
`
`fee-info.pdf
`
`89d00bbf7c624l I cd23927a48f566l 32f8b
`f64l
`
`Total Files Size (in bytes)
`
`327366
`
`This Acknowledgement Receipt evidences receipt on the noted date by the USPTO ofthe indicated documents,
`characterized by the applicant, and including page counts, where applicable. It serves as evidence of receipt similar to a
`Post Card, as described in MPEP 503.
`
`New Applications Under 35 U.S.C. 111
`lfa new application is being filed and the application includes the necessary components for a filing date (see 37 CFR
`1.53(b)-(d) and MPEP 506), a Filing Receipt (37 CFR 1.54) will be issued in due course and the date shown on this
`Acknowledgement Receipt will establish the filing date of the application.
`
`National Stage of an International Application under 35 U.S.C. 371
`lfa timely submission to enter the national stage of an international application is compliant with the conditions of 35
`U.S.C. 371 and other applicable requirements a Form PCT/DO/E0/903 indicating acceptance of the application as a
`national stage submission under 35 U.S.C. 371 will be issued in addition to the Filing Receipt, in due course.
`
`New International Application Filed with the USPTO as a Receiving Office
`lfa new international application is being filed and the international application includes the necessary components for
`an international filing date (see PCT Article 11 and MPEP 1810), a Notification of the International Application Number
`and ofthe International Filing Date (Form PCT/R0/105) will be issued in due course, subject to prescriptions concerning
`national security, and the date shown on this Acknowledgement Receipt will establish the international filing date of
`the application.
`
`7
`
`SYMC 1002
`
`7
`
`SYMC 1002
`
`
`
`
`
`UNITED STATES PATENT AND TRADEMARK OFFICE
`
`UNITED STATES DEPARTMENT OF COMMERCE
`United States Patent and Trademark Office
`Address: COMMISSIONER FOR PATENTS
`P.O. Box 1450
`Alexandria, Virginia 22313-1450
`www.uspto.gov
`
`NOTICE OF ALLOWANCE AND FEE(S) DUE
`
`70763
`
`7590
`
`07/28/2011
`
`Byrne Poh LLP
`11 Broadway, Ste 814
`N6WY0r1<,NY10004
`
`IQBAL, NADEEM
`
`2114
`
`DATE MAILED: 07/28/201 1
`
`0315120.190—US2
`Salvatore J. s101r0
`00/15/2009
`12/091,150
`TITLE OF INVENTION: METHODS, MEDIA AND SYSTEMS FOR DETECTING ANOMALOUS PROGRAM EXECUTIONS
`
`9935
`
`APPLN. TYPE
`
`SMALL ENTITY
`
`ISSUE FEE DUE
`
`PUBLICATION FEE DUE
`
`PREV. PAID ISSUE FEE
`
`TOTAL FEE(S) DUE
`
`DATE DUE
`
`nonprovisional
`
`YES
`
`$755
`
`$300
`
`$0
`
`$ 1055
`
`10/28/2011
`
`THE APPLICATION IDENTIFIED ABOVE HAS BEEN EXAMINED AND IS ALLOWED FOR ISSUANCE AS A PATENT.
`PROSECUTION ON THE MERITS IS CLOSED. THIS NOTICE OF ALLOWANCE IS NOT A GRANT OF PATENT RIGHTS.
`THIS APPLICATION IS SUBJECT TO WITHDRAWAL FROM ISSUE AT THE INITIATIVE OF THE OFFICE OR UPON
`PETITION BY THE APPLICANT. SEE 37 CFR 1.313 AND MPEP 1308.
`
`THE ISSUE FEE AND PUBLICATION FEE (IF REQUIRED) MUST BE PAID WITHIN THREE MONTHS FROM THE
`MAILING DATE OF THIS NOTICE OR THIS APPLICATION SHALL BE REGARDED AS ABANDONED.
`THIS
`STATUTORY PERIOD CANNOT BE EXTENDED.
`SEE 35 U.S.C. 151. THE ISSUE FEE DUE INDICATED ABOVE DOES
`NOT REFLECT A CREDIT FOR ANY PREVIOUSLY PAID ISSUE FEE IN THIS APPLICATION.
`IF AN ISSUE FEE HAS
`PREVIOUSLY BEEN PAID IN THIS APPLICATION (AS SHOWN ABOVE), THE RETURN OF PART B OF THIS FORM
`WILL BE CONSIDERED A REQUEST TO REAPPLY THE PREVIOUSLY PAID ISSUE FEE TOWARD THE ISSUE FEE NOW
`DUE.
`
`HOW TO REPLY TO THIS NOTICE:
`
`1. Review the SMALL ENTITY status shown above.
`
`If the SMALL ENTITY is shown as YES, verify your current
`SMALL ENTITY status:
`
`If the SMALL ENTITY is shown as NO:
`
`A. If the status is the same, pay the TOTAL FEE(S) DUE shown
`above.
`
`A. Pay TOTAL FEE(S) DUE shown above, or
`
`B. If the status above is to be removed, check box 5b on Part B -
`Fee(s) Transmittal and pay the PUBLICATION FEE (if required)
`and twice the amount of the ISSUE FEE shown above, or
`
`B. If applicant claimed SMALL ENTITY status before, or is now
`claiming SMALL ENTITY status, check box 5a on Part B - Fee(s)
`Transmittal and pay the PUBLICATION FEE (if required) and 1/2
`the ISSUE FEE shown above.
`
`II. PART B - FEE(S) TRANSMITTAL, or its equivalent, must be completed and returned to the United States Patent and Trademark Office
`(USPTO) with your ISSUE FEE and PUBLICATION FEE (if required). If you are charging the fee(s) to your deposit account, section "4b"
`of Part B - Fee(s) Transmittal should be completed and an extra copy of the form should be submitted. If an equivalent of Part B is filed, a
`request to reapply a previously paid issue fee must be clearly made, and delays in processing may occur due to the difficulty in recognizing
`the paper as an equivalent of Part B.
`
`III. All communications regarding this application must give the application number. Please direct all communications prior to issuance to
`Mail Stop ISSUE FEE unless advised to the contrary.
`
`IMPORTANT REMINDER: Utility patents issuing on applications filed on or after Dec. 12, 1980 may require payment of
`maintenance fees. It is patentee's responsibility to ensure timely payment of maintenance fees when due.
`
`PTOL—85 (Rev. 02/11)
`
`Pageé°f3
`
`SYMC 1002
`
`8
`
`SYMC 1002
`
`
`
`PART B - FEE(S) TRANSMITTAL
`
`Complete and send this form, together with applicable fee(s), to: Mail Mail Stop ISSUE FEE
`Commissioner for Patents
`P.O. Box 1450
`Alexandria, Virginia 22313-1450
`or 1 (571)-273-2885
`
`through 5 should be completed where
`INSTRUCTIONS: This form should be used for transmitting the ISSUE FEE and PUBLICATION FEE (if required). Blocks 1
`appropriate. All further correspondence including the Patent, advance orders and notification of maintenance fees will be mailed to the current correspondence address as
`in icated unless corrected below or directed otherwise in Block 1, by (a) specifying a new correspondence address; and/or (b) indicating a separate "FEE ADDRESS" for
`maintenance fee notifications.
`
`CURRENT CORRESPONDENCE ADDRESS (Note: Use Blocklfor any Change Ofaddress)
`
`70763
`
`7590
`
`07/28/2011
`
`Byrne Poh LLP
`814
`1 1 B
`d
`S
`roa Ways
`te
`New York, NY 10004
`
`Note: A certificate of mailin can only be used for domestic mailings of the
`Fee(s) Transmittal. This certi icate cannot be used for any other accompanying
`Eapers. Each additional paper, such as an assignment or formal drawing, must
`ave its own certificate of mailing or transmission.
`
`Certificate of Mailing or Transmission
`I hereby certify that this Fee(s) Transmittal is being deposited with the United
`States Postal Service with sufficient postage for first class mail in an envelope
`addressed to the Mail Stop ISSUE FEE address above, or being facsimile
`transmitted to the USPTO (571) 273-2885, on the date indicated below.
`(Depositofs name)
`(Signature)
`(Date)
`
`
`
`0315120.190-US2
`Salvatore J. Stolfo
`06/15/2009
`12/091,150
`TITLE OF INVENTION: METHODS, MEDIA AND SYSTEMS FOR DETECTING ANOMALOUS PROGRAM EXECUTIONS
`
`9935
`
`APPLN. TYPE
`
`SMALL ENTITY
`
`ISSUE FEE DUE
`
`PUBLICATION FEE DUE
`
`PREV. PAID ISSUE FEE
`
`TOTAL FEE(S) DUE
`
`DATE DUE
`
`nonprovisional
`
`YES
`
`IQBAL, NADEEM
`
`$755
`
`2114
`
`$300
`
`$0
`
`$1055
`
`10/28/2011
`
`714-038 100
`
`1. Change of correspondence address or indication of "Fee Address" (37
`CFR 1.363).
`
`3 Chan e of correspondence address (or Change of Correspondence
`Address orm PTO/SB/ 122) attached.
`
`3 "Fee Address" indication (or "Fee Address" Indication form
`PTO/SB/47; Rev 03-02 or more recent) attached. Use of a Customer
`Vumber is required.
`
`
`
`2. For printing on the patent front page, list
`(1) the names of up to 3 registered patent attorneys
`or agents OR, alternatively,
`(2) the name of a single firm (having as a member a
`registered attorney or agent) and the names of up to
`2 registered patent attorneys or agents. If no name is
`listed, no name will be printed.
`
`2
`
`3
`
`3. ASSIGNEE NAME AND RESIDENCE DATA TO BE PRINTED ON THE PATENT (print or type)
`If an assignee is identified below, the document has been filed for
`PLEASE NOTE: Unless an assignee is identified below, no assignee data will appear on the patent.
`recordation as set forth in 37 CFR 3.11. Completion of this form is NOT a substitute for filing an assignment.
`(A) NAME OF ASSIGNEE
`(B) RESIDENCE: (CITY and STATE OR COUNTRY)
`
`Please check the appropriate assignee category or categories (will not be printed on the patent) :
`
`'3 Individual
`
`'3 Corporation or other private group entity '3 Government
`
`4a. The following fee(s) are submitted:
`3 Issue Fee
`
`4b. Payment of Fee(s): (Please first reapply any previously paid issue fee shown above)
`3 A check is enclosed.
`
`3 Publication Fee (No small entity discount permitted)
`3 Advance Order — # of Copies
`
`3 Payment by credit card. Form PTO-2038 is attached.
`3 The Director is hereby authorized to charge the required fee(s), any deficiency, or credit any
`overpayment, to Deposit Account Number
`(enclose an extra copy of this form).
`
`5. Change in Entity Status (from status indicated above)
`J b. Applicant is no longer claiming SMALL ENTITY status. See 37 CFR 1.27(g)(2).
`3 a. Applicant claims SMALL ENTITY status. See 37 CFR 1.27.
`NOTE: The Issue Fee and Publication Fee (if required) will not be accepted from anyone other than the applicant; a registered attorney or agent; or the assignee or other party in
`interest as shown by the records of the United States Patent and Trademark Office.
`
`Authorized Signature
`
`Typed or printed name
`
`Date
`
`Registration No.
`
`This collection of information is required by 37 CFR 1.311. The information is re uired to obtain or retain a benefit by the public which is to file (and by the USPTO to process)
`an application. Confidentiality is governed by 35 U.S.C. 122 and 37 CFR 1.14. T is collection is estimated to take 12 minutes to complete, including gathering, preparing, and
`submitting the completed application form to the USPTO. Time will v
`de endin upon the individual case. Any comments on the amount of time you require to complete
`this form and/or su gestions for reducing this burden, should be sent to
`e C ief In ormation Officer, U.S. Patent and Trademark Office, U.S. Department of Commerce, P.O.
`Box 1450, Alexan ria, Virginia 22313-1450. DO NOT SEND FEES OR COMPLETED FORMS TO THIS ADDRESS. SEND TO: Commissioner for Patents, P.O. Box 1450,
`Alexandria, Virginia 22313-1450.
`Under the Paperwork Reduction Act of 1995, no persons are required to respond to a collection of information unless it displays a valid OMB control number.
`
`PTOL-85 (Rev. 02/11) Approved for use through 08/31/2013.
`
`9
`OMB 0651-0033
`
`SYMC 1002
`U.S. Patent and Trademark Office; U.S. DEPARTMENT OF COMMERCE
`
`9
`
`SYMC 1002
`
`
`
`
`
`UNITED STATES PATENT AND TRADEMARK OFFICE
`
`UNITED STATES DEPARTMENT OF COMMERCE
`United States Patent and Trademark Office
`Address: COMMISSIONER FOR PATENTS
`P.O. Box 1450
`Alexandria, Virginia 22313-1450
`www.uspto.goV
`
`APPLICATION NO.
`
`FILING DATE
`
`F {ST NAMED INVENTOR
`
`ATTORNEY DOCKET NO.
`
`CONFIRMATION NO.
`
`12/091,150
`
`06/15/2009
`
`Salvatore J. Stolfo
`
`0315120.190—US2
`
`9935
`
`70763
`
`7590
`
`07/28/2011
`
`Byrne Poh LLP
`11 Broadway, Ste 814
`New York. NY 10004
`
`IQBAL, NADEEM
`
`2114
`
`DATE MAILED: 07/28/201 1
`
`Determination of Patent Term Adjustment under 35 U.S.C. 154 (b)
`
`(application filed on or after May 29, 2000)
`
`The Patent Term Adjustment to date is 0 day(s). If the issue fee is paid on the date that is three months after the
`mailing date of this notice and the patent issues on the Tuesday before the date that is 28 weeks (six and a half
`months) after the mailing date of this notice, the Patent Term Adjustment will be 0 day(s).
`
`If a Continued Prosecution Application (CPA) was filed in the above—identified application, the filing date that
`determines Patent Term Adjustment is the filing date of the most recent CPA.
`
`Applicant will be able to obtain more detailed information by accessing the Patent Application Information Retrieval
`(PAIR) WEB site (http://pair.uspto.goV).
`
`Any questions regarding the Patent Term Extension or Adjustment determination should be directed to the Office of
`Patent Legal Administration at (571)-272-7702. Questions relating to issue and publication fee payments should be
`directed to the Customer Service Center of the Office of Patent Publication at 1—(888)—786—010l or (571)-272-4200.
`
`PTOL—85 (Rev. 02/11)
`
`Page130’”
`
`SYMC 1002
`
`10
`
`SYMC 1002
`
`
`
`Privacy Act Statement
`
`The Privacy Act of 1974 (P.L. 93-579) requires that you be given certain information in connection with
`your submission of the attached form related to a patent application or patent. Accordingly, pursuant to
`the requirements of the Act, please be advised that: (1) the general authority for the collection of this
`information is 35 U.S.C. 2(b)(2); (2) furnishing of the information solicited is voluntary; and (3) the
`principal purpose for which the information is used by the U.S. Patent and Trademark Office is to process
`and/or examine your submission related to a patent application or patent. If you do not furnish the
`requested information, the U.S. Patent and Trademark Office may not be able to process and/or examine
`your submission, which may result in termination of proceedings or abandonment of the application or
`expiration of the patent.
`
`The information provided by you in this form will be subject to the following routine uses:
`
`1. The information on this form will be treated confidentially to the extent allowed under the Freedom
`of Information Act (5 U.S.C. 552) and the Privacy Act (5 U.S.C 552a). Records from this system of
`records may be disclosed to the Department of Justice to determine whether disclosure of these
`records is required by the Freedom of Information Act.
`A record from this system of records may be disclosed, as a routine use, in the course of presenting
`evidence to a court, magistrate, or administrative tribunal, including disclosures to opposing counsel
`in the course of settlement negotiations.
`. A record in this system of records may be disclosed, as a routine use, to a Member of Congress
`submitting a request involving an individual, to whom the record pertains, when the individual has
`requested assistance from the Member with respect to the subject matter of the record.
`A record in this system of records may be disclosed, as a routine use, to a contractor of the Agency
`having need for the information in order to perform a contract. Recipients of information shall be
`required to comply with the requirements of the Privacy Act of 1974, as amended, pursuant to 5
`U.S.C. 552a(m).
`. A record related to an International Application filed under the Patent Cooperation Treaty in this
`system of records may be disclosed, as a routine use, to the International Bureau of the World
`Intellectual Property Organization, pursuant to the Patent Cooperation Treaty.
`. A record in this system of records may be disclosed, as a routine use, to another federal agency for
`purposes of National Security review (35 U.S.C. 181) and for review pursuant to the Atomic Energy
`Act (42 U.S.C. 2l8(c)).
`to the Administrator,
`. A record from this system of records may be disclosed, as a routine use,
`General Services, or his/her designee, during an inspection of records conducted by GSA as part of
`that agency's responsibility to recommend improvements in records management practices and
`programs, under authority of 44 U.S.C. 2904 and 2906. Such disclosure shall be made in accordance
`with the GSA regulations governing inspection of records for this purpose, and any other relevant
`(i.e., GSA or Commerce) directive. Such disclosure shall not be used to make determinations about
`individuals.
`
`. A record from this system of records may be disclosed, as a routine use, to the public after either
`publication of the application pursuant to 35 U.S.C. l22(b) or issuance of a patent pursuant to 35
`U.S.C. 151. Further, a record may be disclosed, subject to the limitations of 37 CFR 1.14, as a
`routine use, to the public if the record was filed in an application which became abandoned or in
`which the proceedings were terminated and which application is referenced by either a published
`application, an application open to public inspection or an issued patent.
`A record from this system of records may be disclosed, as a routine use, to a Federal, State, or local
`law enforcement agency, if the USPTO becomes aware of a violation or potential violation of law or
`regulation.
`
`11
`
`SYMC 1002
`
`11
`
`SYMC 1002
`
`
`
`Of
`
`Application No.
`
`App|icant(s)
`
`12/091,150
`Examiner
`
`STOLFO ET AL.
`Art Unit
`
`NADEEM IQBAL
`
`2114
`
`-- The MAILING DA TE of this communication appears on the cover sheet with the correspondence address--
`All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application.
`If not included
`herewith (or previously mailed), a Notice of Allowance (PTOL—85) or other appropriate communication will be mailed in due course. THIS
`NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative
`of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308.
`
`1. IX] This communication is responsive to June 17 2011.
`
`2. IX] The allowed cIaim(s) is/are 1-42.
`
`3. El Acknowledgment is made of a claim for foreign priority under 35 U.S.C.§119( )—(d) or (f).
`a) I:IA|I
`b) I:l Some*c) I:I None
`of the:
`
`1. I:I Certified copies of the priority documents have been received.
`
`2. El Certified copies of the priority documents have been received in Application No. j
`
`3. El Copies of the certified copies of the priority documents have been received in this national stage application from the
`
`International Bureau (PCT Rule 17.2( )).
`
`* Certified copies not received:
`
`Applicant has THREE MONTHS FROM THE “MAILING DATE” of this communication to file a reply complying with the requirements
`noted below. Failure to timely comply will result in ABANDONMENT of this application.
`THIS THREE-MONTH PERIOD IS NOT EXTENDABLE.
`
`4. E] A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER’S AMENDMENT or NOTICE OF
`INFORMAL PATENT APPLICATION (PTO—152) which gives reason(s) why the oath or declaration is deficient.
`
`5. El CORRECTED DRAWINGS ( as “replacement sheets”) must be submitted.
`(a) I] including changes required by the Notice of Draftsperson’s Patent Drawing Review ( PTO—948) attached
`
`1) I:Ihereto or 2) I] to Paper No./Mail Date
`
`(b) I] including changes required by the attached Examiner’s Amendment / Comment or in the Office action of
`Paper No./Mail Date
`Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of
`each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d).
`
`6. I] DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the
`attached Examiner’s comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL.
`
`Attachment(s)
`1. IX Notice of References Cited (PTO—892)
`
`2. El Notice of Draftperson‘s Patent Drawing Review (PTO—948)
`
`3. IX Information Disclosure Statements (PTO/SB/08),
`Paper No./Mail Date 6/17/11
`4. El Examiner’s Comment Regarding Requirement for Deposit
`of Biological Material
`
`5. I:I Notice of Informal Patent Application
`
`6. I:I Interview Summary (PTO—413),
`Paper No./Mail Date
`.
`7. I:I Examiners Amendment/Comment
`
`8 E Examiner’s Statement of Reasons for Allowance
`
`9. I:IOther
`
`.
`
`/Nadeem IqbaI/
`Primary Examiner, Art Unit 21 14
`
`U.S. Patent and Trademark Office
`
`PTOL-37 (Rev. 08-06)
`
`Notice of Allowability
`
`Part of Paper No./Mail Date 20110726-A
`
`12
`
`SYMC 1002
`
`12
`
`SYMC 1002
`
`
`
`Application/Control Number: 12/091,150
`
`Page 2
`
`Art Unit: 2114
`
`REASONS FOR ALLOWANCE
`
`The following is an Examiner’s Statement of Reasons for Allowance:
`
`The prior arts of record teach a method for detecting malicious code comprising determining
`
`prior to executing at least one predetermined target routine during execution of the application
`
`whether a run time invocation of the at least one predetermined target routine is identified by a
`
`model as being invoked from a predetermined location in the application, the model identifying
`
`locations within the application from which invocations of the at least one predetermined target
`
`routine occur; and if the run time invocation of the at least one predetermined target routine has
`
`not been identified from a predetermined location by the model, determining that the application
`
`includes malicious code. Khazan et al., (U.S. Patent Application Publication number
`
`2005/0108562) is one such example of prior art. The prior art of record, however, fails to teach,
`
`singly or in combination comparing a function call made in an emulator to a model of function
`
`calls for the at least a part of the program, identifying the function call as anomalous based on
`
`the comparison and upon identification, notifying an application community. The subject matter
`
`sought to be patented as recited in the claims in this application has practical applications in the
`
`field of detecting anomalous program executions.
`
`Any comments considered necessary by applicant must be submitted no later than the
`payment of the Issue Fee and, to avoid processing delays, should preferably accompany the
`Issue Fee. Such submissions should be clearly labeled “Comments on Statement of Reasons for
`Allowance”.
`
`Any inquiry concerning this communication or earlier communications from the
`
`examiner should be directed to Nadeem Iqbal whose telephone number is (571)-272-3659. The
`
`examiner can normally be reached on M—F (8:00—5:30) First Friday Off.
`
`13
`
`SYMC 1002
`
`13
`
`SYMC 1002
`
`
`
`Application/Control Number: 12/091,150
`
`Page 3
`
`Art Unit: 2114
`
`If attempts to reach the examiner by telephone are unsuccessful, the examiner’s
`
`supervisor, Scott Baderman can be reached on (571)-272-3644. The fax phone number for the
`
`organization where this application or proceeding is assigned is 703-872-9306.
`
`Information regarding the status of an application may be obtained from the Patent
`
`Application Information Retrieval (PAIR) system. Status information for published applications
`
`may be obtained from either Private PAIR or Public PAIR. Status information for unpublished
`
`applications is available through Private PAIR only. For more information about the PAIR
`
`system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR
`
`system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free).
`
`/Nadeem Iqb