专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明授权

US08180986B2 Memory conflict detection via mapping of the physical heap to control access permissions to the memory 有权
标题翻译：通过物理堆映射来检测内存冲突，以控制对内存的访问权限
公开(公告)号：US08180986B2
公开(公告)日：2012-05-15
申请号：US12212025
申请日：2008-09-17
申请人： Timothy Harris , Martin Abadi
发明人： Timothy Harris , Martin Abadi
IPC分类号： G06F12/00
CPC分类号： G06F12/145 , G06F9/528
摘要： A transactional memory system is described for reporting memory access violations which occur when memory accesses made from instructions within a transaction conflict with memory accesses to the same memory location made from a non-transactional instruction. In an embodiment this is achieved by creating two mappings of a physical heap being used by a thread. The thread (which may be part of a multi-threaded process) comprises instructions for both transactional and non-transactional accesses to the physical heap which may execute concurrently as part of that thread. One of the mappings is used for non-transactional memory accesses to the physical heap. The other mapping is used for transactional memory accesses to the physical heap. Access permissions associated with the mappings are controlled to enable attempted memory access violations to be detected and reported.
摘要翻译：描述了一种事务性存储器系统，用于报告存储器访问冲突的发生，当由事务内的指令进行的存储器访问与从非事务性指令进行的存储器访问的存储器访问冲突时发生。在一个实施例中，这是通过创建由线程使用的物理堆的两个映射来实现的。线程（可以是多线程进程的一部分）包括用于对物理堆的事务和非事务性访问的指令，该物理堆可以作为该线程的一部分同时执行。其中一个映射用于对物理堆的非事务内存访问。另一个映射用于对物理堆的事务内存访问。控制与映射关联的访问权限，以便检测和报告尝试的内存访问冲突。

22. 发明申请

US20120102169A1 AUTOMATIC IDENTIFICATION OF TRAVEL AND NON-TRAVEL NETWORK ADDRESSES 有权
标题翻译：自动识别旅行和非旅行网络地址
公开(公告)号：US20120102169A1
公开(公告)日：2012-04-26
申请号：US12909839
申请日：2010-10-22
申请人： Fang Yu , Yinglian Xie , Martin Abadi , Stefan Roberts Savage , Geoffrey Michael Voelker , Andreas Pitsillidis
发明人： Fang Yu , Yinglian Xie , Martin Abadi , Stefan Roberts Savage , Geoffrey Michael Voelker , Andreas Pitsillidis
IPC分类号： G06F15/173
CPC分类号： H04L67/18 , H04L61/15 , H04L61/609 , H04L63/1425
摘要： A system to automatically classify types of IP addresses associated with a user. Information, such as user names, machine information, IP address, etc., may be obtained from logs. For each user or host in the logs, home IP addresses are identified from IP addresses where the user or host shows a predetermined level of activity. Travel IP addresses are identified, which are IP addresses at locations greater than a predetermined distance from the home IP addresses, as determined from geolocation data. A pattern analysis may be performed to determine which of the home IP addresses are work IP addresses associated with the user or host. The system may thus provide a classification of a user's or host's associated IP addresses as being one of travel, home, and work IP addresses. From this classification, mobility patterns may be derived, as well as applications to enhance security, advertising, search and network management.
摘要翻译：用于自动分类与用户相关联的IP地址类型的系统。可以从日志中获取诸如用户名，机器信息，IP地址等的信息。对于日志中的每个用户或主机，归属IP地址从用户或主机显示预定级别的活动的IP地址识别。识别出旅行IP地址，这些IP地址在距离家庭IP地址大于预定距离的位置处，这是根据地理定位数据确定的。可以执行模式分析以确定哪个归属IP地址是与用户或主机相关联的工作IP地址。因此，系统可以将用户或主机的相关IP地址的分类提供为旅行，家庭和工作IP地址之一。从这种分类可以推导出移动性模式，以及增强安全性，广告，搜索和网络管理的应用。

23. 发明授权

US07788637B2 Operating system process identification 有权
标题翻译：操作系统进程识别
公开(公告)号：US07788637B2
公开(公告)日：2010-08-31
申请号：US11118690
申请日：2005-04-29
申请人： Galen C. Hunt , James R. Larus , John D. DeTreville , Edward P Wobber , Martin Abadi , Michael B. Jones , Trishul A. Chilimbi
发明人： Galen C. Hunt , James R. Larus , John D. DeTreville , Edward P Wobber , Martin Abadi , Michael B. Jones , Trishul A. Chilimbi
IPC分类号： G06F9/44
CPC分类号： G06F21/562 , G06F21/566 , G06F21/57
摘要： Described herein is an implementation of a technology for the construction, identification, and/or optimization of operating-system processes. At least one implementation, described herein, constructs an operating-system process having the contents as defined by a process manifest. Once constructed, the operating-system process is unalterable.
摘要翻译：这里描述了用于构建，识别和/或优化操作系统过程的技术的实现。这里描述的至少一个实现构造具有由过程清单定义的内容的操作系统过程。一旦构建，操作系统过程是不可改变的。

24. 发明授权

US07716734B2 Systems and methods for pattern matching on principal names to control access to computing resources 有权
标题翻译：用于主体名称上的模式匹配的系统和方法，以控制对计算资源的访问
公开(公告)号：US07716734B2
公开(公告)日：2010-05-11
申请号：US11133806
申请日：2005-05-19
申请人： Andrew David Birrell , Edward P. Wobber , Martin Abadi
发明人： Andrew David Birrell , Edward P. Wobber , Martin Abadi
IPC分类号： G06F7/04 , G06F21/00
CPC分类号： G06F21/6218
摘要： Systems and methods are provided for resource access control in computer systems. Our approach includes new techniques for composing and authenticating principals in an access control system. Our principals may comprise information that identifies the role of the user of a computer system, the mechanism by which the user was authenticated, and program execution history. Thus, when a principal makes a request, access control determinations can be made based on the principal's identity. Access control lists may provide patterns that are used to recognize principals, thereby ensuring a level of security without enumerating precise identifiers for all of the possible principles that may request a particular resource.
摘要翻译：为计算机系统中的资源访问控制提供了系统和方法。我们的方法包括在访问控制系统中组合和验证主体的新技术。我们的主体可以包括识别计算机系统的用户的角色，用户被认证的机制以及程序执行历史的信息。因此，当委托人发出请求时，可以基于主体的身份进行访问控制确定。访问控制列表可以提供用于识别主体的模式，从而确保安全级别，而不需要列举可能请求特定资源的所有可能原则的精确标识符。

25. 发明申请

US20100070727A1 Transactional Memory System 有权
标题翻译：事务性内存系统
公开(公告)号：US20100070727A1
公开(公告)日：2010-03-18
申请号：US12212025
申请日：2008-09-17
申请人： Timothy Harris , Martin Abadi
发明人： Timothy Harris , Martin Abadi
IPC分类号： G06F12/14
CPC分类号： G06F12/145 , G06F9/528
摘要： A transactional memory system is described for reporting memory access violations which occur when memory accesses made from instructions within a transaction conflict with memory accesses to the same memory location made from a non-transactional instruction. In an embodiment this is achieved by creating two mappings of a physical heap being used by a thread. The thread (which may be part of a multi-threaded process) comprises instructions for both transactional and non-transactional accesses to the physical heap which may execute concurrently as part of that thread. One of the mappings is used for non-transactional memory accesses to the physical heap. The other mapping is used for transactional memory accesses to the physical heap. Access permissions associated with the mappings are controlled to enable attempted memory access violations to be detected and reported.
摘要翻译：描述了一种事务性存储器系统，用于报告存储器访问冲突的发生，当由事务内的指令进行的存储器访问与从非事务性指令进行的存储器访问的存储器访问冲突时发生。在一个实施例中，这是通过创建由线程使用的物理堆的两个映射来实现的。线程（可以是多线程进程的一部分）包括用于对物理堆的事务和非事务性访问的指令，该物理堆可以作为该线程的一部分同时执行。其中一个映射用于对物理堆的非事务内存访问。另一个映射用于对物理堆的事务内存访问。控制与映射关联的访问权限，以便检测和报告尝试的内存访问冲突。

26. 发明申请

US20090083832A1 Modal and linear techniques for access control logic 审中-公开
标题翻译：访问控制逻辑的模态和线性技术
公开(公告)号：US20090083832A1
公开(公告)日：2009-03-26
申请号：US11903076
申请日：2007-09-20
申请人： Martin Abadi , Deepak Garg , David E. Langworthy
发明人： Martin Abadi , Deepak Garg , David E. Langworthy
IPC分类号： H04L9/32 , G06F17/00
CPC分类号： G06F21/6218
摘要： Access control logic may use logical constructs such as “says” and “speaks for”, and may be translated to modal logic. The modal logic may be used to determine the truth or falsehood of formulas in access control logic, which may be used in access control decisions. The modal logic may be S4, and access control logic, including “says” and “speaks for”, may be translated into S4. Linear logic may be used to guarantee separation of duty in access control.
摘要翻译：访问控制逻辑可以使用诸如“说”和“说话”之类的逻辑结构，并且可以被转换为模态逻辑。模态逻辑可用于确定访问控制逻辑中公式的真值或虚假，这可以用于访问控制决策。模态逻辑可以是S4，并且包括“说”和“说话”的访问控制逻辑可以被翻译成S4。线性逻辑可用于保证访问控制中的责任分离。

27. 发明授权

US06480502B1 Method for avoiding broadcast deadlocks in a mesh-connected network 失效
标题翻译：避免网状网络中广播死锁的方法
公开(公告)号：US06480502B1
公开(公告)日：2002-11-12
申请号：US09079543
申请日：1998-05-15
申请人： Martin Abadi , Thomas Lee Rodeheffer
发明人： Martin Abadi , Thomas Lee Rodeheffer
IPC分类号： H04J326
CPC分类号： H04L45/24 , H04L12/1854 , H04L45/00 , H04L45/16 , H04L45/50
摘要： A method for broadcasting packets in a network that includes a plurality of switches. The network can logically be represented by a spanning tree plus cross-links. In order to avoid deadlock during a broadcast, a broadcast packet is sent from an originating switch to a root switch of the network, and a copy of the packet is sent from a current switch to all descendant switches when all copies of the packet have been received in the current switch.
摘要翻译：一种在包括多个交换机的网络中广播分组的方法。网络可以逻辑地由生成树加交叉链接表示。为了避免广播过程中的死锁，广播包从发端交换机发送到网络的根交换机，当数据包的所有副本已经被发送到所有后备交换机时，该分组的副本从当前交换机发送到所有后代交换机在当前开关中收到。

28. 发明授权

US08997220B2 Automatic detection of search results poisoning attacks 有权
标题翻译：自动检测搜索结果中毒攻击
公开(公告)号：US08997220B2
公开(公告)日：2015-03-31
申请号：US13116012
申请日：2011-05-26
申请人： Fang Yu , Yinglian Xie , Martin Abadi , John P. John , Arvind Krishnamurthy
发明人： Fang Yu , Yinglian Xie , Martin Abadi , John P. John , Arvind Krishnamurthy
IPC分类号： G06F11/00 , G06F21/56 , H04L29/06 , G06F12/14 , G06F7/04 , G06F17/30
CPC分类号： G06F21/56 , H04L63/1408 , H04L63/1466 , H04L63/168
摘要： Search result poisoning attacks may be automatically detected by identifying groups of suspicious uniform resource locators (URLs) containing multiple keywords and exhibiting patterns that deviate from other URLs in the same domain without crawling and evaluating the actual contents of each web page. Suspicious websites are identified and lexical features are extracted for each such website. The websites are clustered based on their lexical features, and group analysis is performed on each group to identify at least one suspicious group. Other implementations are directed to detecting a search engine optimization (SEO) attack by processing a large population of URLs to identify suspicious URLs based on the presence of a subset of keywords in each URL and the relative newness of each URL.
摘要翻译：搜索结果中毒攻击可以通过识别包含多个关键字的可疑统一资源定位器（URL）的组，并且在不进行爬行和评估每个网页的实际内容的同一领域中展示不同于其他URL的模式来检测。识别可疑网站，为每个此类网站提取词汇功能。这些网站根据其词汇特征进行聚类，并对每个组进行组分析，以确定至少一个可疑组。其他实现涉及通过处理大量URL来检测搜索引擎优化（SEO）攻击，以基于每个URL中的关键字的存在以及每个URL的相对新颖度来识别可疑URL。

29. 发明授权

US08615605B2 Automatic identification of travel and non-travel network addresses 有权
标题翻译：自动识别旅行和非旅行网络地址
公开(公告)号：US08615605B2
公开(公告)日：2013-12-24
申请号：US12909839
申请日：2010-10-22
申请人： Fang Yu , Yinglian Xie , Martin Abadi , Stefan Roberts Savage , Geoffrey Michael Voelker , Andreas Pitsillidis
发明人： Fang Yu , Yinglian Xie , Martin Abadi , Stefan Roberts Savage , Geoffrey Michael Voelker , Andreas Pitsillidis
IPC分类号： G06F15/16
CPC分类号： H04L67/18 , H04L61/15 , H04L61/609 , H04L63/1425
摘要： A system to automatically classify types of IP addresses associated with a user. Information, such as user names, machine information, IP address, etc., may be obtained from logs. For each user or host in the logs, home IP addresses are identified from IP addresses where the user or host shows a predetermined level of activity. Travel IP addresses are identified, which are IP addresses at locations greater than a predetermined distance from the home IP addresses, as determined from geolocation data. A pattern analysis may be performed to determine which of the home IP addresses are work IP addresses associated with the user or host. The system may thus provide a classification of a user's or host's associated IP addresses as being one of travel, home, and work IP addresses. From this classification, mobility patterns may be derived, as well as applications to enhance security, advertising, search and network management.
摘要翻译：用于自动分类与用户相关联的IP地址类型的系统。可以从日志中获取诸如用户名，机器信息，IP地址等的信息。对于日志中的每个用户或主机，归属IP地址从用户或主机显示预定级别的活动的IP地址识别。识别出旅行IP地址，这些IP地址在距离家庭IP地址大于预定距离的位置处，这是根据地理定位数据确定的。可以执行模式分析以确定哪个归属IP地址是与用户或主机相关联的工作IP地址。因此，系统可以将用户或主机的相关IP地址的分类提供为旅行，家庭和工作IP地址之一。从这种分类可以推导出移动性模式，以及增强安全性，广告，搜索和网络管理的应用。

30. 发明授权

US08495742B2 Identifying malicious queries 有权
标题翻译：识别恶意查询
公开(公告)号：US08495742B2
公开(公告)日：2013-07-23
申请号：US12780935
申请日：2010-05-17
申请人： Martin Abadi , Yinglian Xie , Fang Yu , John Payyappillil John
发明人： Martin Abadi , Yinglian Xie , Fang Yu , John Payyappillil John
IPC分类号： G06F11/00 , G06F12/14 , G06F12/16 , G08B23/00
CPC分类号： H04L63/1416 , H04L63/0227
摘要： A framework identifies malicious queries contained in search logs to uncover relationships between the malicious queries and the potential attacks launched by attackers submitting the malicious queries. A small seed set of malicious queries may be used to identify an IP address in the search logs that submitted the malicious queries. The seed set may be expanded by examining all queries in the search logs submitted by the identified IP address. Regular expressions may be generated from the expanded set of queries and used for detecting yet new malicious queries. Upon identifying the malicious queries, the framework may be used to detect attacks on vulnerable websites, spamming attacks, and phishing attacks.
摘要翻译：框架识别搜索日志中包含的恶意查询，以发现恶意查询与攻击者提交恶意查询的潜在攻击之间的关系。可以使用小型种族恶意查询来标识提交恶意查询的搜索日志中的IP地址。可以通过检查由所标识的IP地址提交的搜索日志中的所有查询来扩展种子集。可以从扩展的查询集生成正则表达式，并用于检测新的恶意查询。在识别恶意查询后，该框架可用于检测对易受攻击网站的攻击，垃圾邮件攻击和网络钓鱼攻击。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式