Prior art

To identify the most relevant prior art for US patent 8635697 and provide the requested details, I will use the authoritative patent text from Google Patents, which includes a "Citations" section.

Here are the prior art references cited in US Patent 8635697, along with the requested information:

1. US8020211B2

• Full Citation: US8020211B2 - Network security system having a device profiler communicatively coupled to a traffic monitor [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Publication Date: September 13, 2011 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Filing Date: August 25, 2000 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Assignee: Ncircle Network Security, Inc. [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Brief Description: This patent describes a network security system that includes a device profiler coupled to a traffic monitor. It aims to provide security by monitoring network traffic and profiling devices on the network. [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Potentially Anticipates Claim(s) under 35 U.S.C. § 102: While a detailed anticipation analysis requires a claim-by-claim comparison, US8020211B2 broadly addresses network security and monitoring, including device profiling, which could potentially anticipate aspects of claims 1, 15, and 24 related to network-based detection and identifying characteristics of devices. Specifically, the "device profiler" could relate to determining an OS ID or other device characteristics.

2. US20110213869A1

• Full Citation: US20110213869A1 - Processing data flows with a data flow processor [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Publication Date: September 1, 2011 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Filing Date: September 25, 2000 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Assignee: Yevgeny Korsunsky [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Brief Description: This publication details systems and methods for processing data flows using a data flow processor. It focuses on the efficient handling and analysis of data streams within a network environment. [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Potentially Anticipates Claim(s) under 35 U.S.C. § 102: This reference's focus on processing data flows might anticipate aspects of claims 1, 15, and 24 concerning the "receiving one or more transmission control protocol (TCP) packets" and subsequent analysis.

3. US7317693B1

• Full Citation: US7317693B1 - Systems and methods for determining the network topology of a network [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Publication Date: January 8, 2008 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Filing Date: May 12, 2003 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Assignee: Sourcefire, Inc. [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Brief Description: This patent describes systems and methods for mapping or determining the network topology. This capability is often fundamental to network-based security solutions. [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Potentially Anticipates Claim(s) under 35 U.S.C. § 102: While not directly addressing malware or OS identification, understanding network topology (including devices and their connections) is foundational. Thus, it could potentially be considered prior art for the general context of claims 1, 15, and 24 related to monitoring network traffic from access devices and computing devices.

4. US20070250930A1

• Full Citation: US20070250930A1 - Virtual machine with dynamic data flow analysis [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Publication Date: October 25, 2007 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Filing Date: April 1, 2004 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Assignee: Ashar Aziz [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Brief Description: This publication discusses a virtual machine with dynamic data flow analysis capabilities. Dynamic analysis is a technique often used in malware detection to observe behavior. [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Potentially Anticipates Claim(s) under 35 U.S.C. § 102: The concept of "dynamic data flow analysis" could potentially anticipate the "determining if malware is present... by comparing a malware signature to the one or more TCP packets" element found in claims 1, 15, and 24, especially if the malware signatures are behavioral or dynamic in nature.

5. US7627898B2

• Full Citation: US7627898B2 - Method and system for detecting infection of an operating system [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Publication Date: December 1, 2009 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Filing Date: July 23, 2004 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Assignee: Microsoft Corporation [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Brief Description: This patent directly addresses methods and systems for detecting operating system infections, which is highly relevant to the core invention of US8635697. [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Potentially Anticipates Claim(s) under 35 U.S.C. § 102: This reference is highly relevant as it explicitly covers detecting OS infections. It could potentially anticipate aspects of claims 1, 15, and 24 related to "determining an operating system identifier (OS ID) associated with the TCP session and the computing device" and "determining if malware is present... and an associated malware ID." A detailed comparison would be needed to see if its specific methods for OS infection detection fully align with the claimed methods in US8635697.

6. US8065712B1

• Full Citation: US8065712B1 - Methods and devices for qualifying a client machine to access a network [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Publication Date: November 22, 2011 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Filing Date: February 16, 2005 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Assignee: Cisco Technology, Inc. [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Brief Description: This patent describes methods and devices for qualifying client machines before they access a network. This often involves checking security posture or characteristics of the client. [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Potentially Anticipates Claim(s) under 35 U.S.C. § 102: "Qualifying a client machine" could involve identifying its operating system or checking for malware, making it potentially relevant to the "determining an operating system identifier (OS ID)" and "determining if malware is present" steps in claims 1, 15, and 24.

7. US8429746B2

• Full Citation: US8429746B2 - Decoy network technology with automatic signature generation for intrusion detection and intrusion prevention systems [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Publication Date: April 23, 2013 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Filing Date: May 22, 2006 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Assignee: Neuraliq, Inc. [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Brief Description: This patent describes decoy network technology and automatic signature generation for intrusion detection and prevention systems. Signature generation is key to malware detection. [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Potentially Anticipates Claim(s) under 35 U.S.C. § 102: The "automatic signature generation for intrusion detection" is highly relevant to "comparing a malware signature to the one or more TCP packets" in claims 1, 15, and 24, as it describes a method for obtaining those signatures.

8. US20080282338A1

• Full Citation: US20080282338A1 - System and method for preventing the reception and transmission of malicious or objectionable content transmitted through a network [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Publication Date: November 13, 2008 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Filing Date: May 9, 2007 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Assignee: Beer Kevin J [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Brief Description: This publication describes a system and method aimed at preventing the transmission and reception of malicious content over a network, directly related to network security and malware. [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Potentially Anticipates Claim(s) under 35 U.S.C. § 102: This reference broadly covers preventing malicious content, which encompasses malware detection. Therefore, it could potentially anticipate the "determining if malware is present" aspect of claims 1, 15, and 24.

9. US20110004935A1

• Full Citation: US20110004935A1 - Vmm-based intrusion detection system [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Publication Date: January 6, 2011 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Filing Date: February 1, 2008 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Assignee: Micha Moffie [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Brief Description: This publication describes a Virtual Machine Monitor (VMM)-based intrusion detection system, which monitors activity to detect malicious behavior. [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Potentially Anticipates Claim(s) under 35 U.S.C. § 102: A VMM-based intrusion detection system would inherently be involved in monitoring network traffic and identifying malicious activity, potentially anticipating the "determining if malware is present" step in claims 1, 15, and 24.

10. US20120204266A1

• Full Citation: US20120204266A1 - Method for providing an anti-malware service [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Publication Date: August 9, 2012 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Filing Date: October 12, 2009 [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Assignee: Samsung Sds Co., Ltd. [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Brief Description: This publication describes a method for providing an anti-malware service, directly related to the subject matter of US8635697. [cite: The authoritative patent text for US8635697B2 lists this patent as a citation.]
• Potentially Anticipates Claim(s) under 35 U.S.C. § 102: This reference is highly relevant due to its focus on providing an anti-malware service. It could potentially anticipate the "determining if malware is present... by comparing a malware signature to the one or more TCP packets" and the broader concept of malware detection and remediation present in claims 1, 15, and 24.

Note on Anticipation: Determining full anticipation under 35 U.S.C. § 102 requires a detailed element-by-element comparison of each claim of US8635697 against the disclosures of each prior art reference. The potential anticipations listed above are based on the general description of the prior art and their relevance to the core concepts of US8635697, and would need further in-depth analysis for a definitive conclusion.