专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20100205669A1 O-TOUCH AND 1-TOUCH TECHNIQUES FOR IMPROVING THE AVAILABILITY OF COMPUTER PROGRAMS UNDER PROTECTION WITHOUT COMPROMISING SECURITY 有权
标题翻译：用于改善计算机程序可靠性的O-TOUCH和1触摸技术，而不影响安全性
公开(公告)号：US20100205669A1
公开(公告)日：2010-08-12
申请号：US12764622
申请日：2010-04-21
申请人： Srinivas MANTRIPRAGADA , Tim GARNETT , Derek BRUENING , Vladimir KIRIANSKY , Bharath CHANDRAMOHAN , James BRINK , Saman P. AMARASINGHE , Sandy WILBOURN
发明人： Srinivas MANTRIPRAGADA , Tim GARNETT , Derek BRUENING , Vladimir KIRIANSKY , Bharath CHANDRAMOHAN , James BRINK , Saman P. AMARASINGHE , Sandy WILBOURN
IPC分类号： G06F12/14 , G06F21/00
CPC分类号： G06F21/51 , G06F21/52 , G06F21/55
摘要： Protected software, such as an application and/or DLL, is monitored by protective software to guard against attacks, while distinguishing spurious, benign events from attacks. In a 1-touch approach, the protected software is monitored in a testing environment to detect spurious, benign events caused by, e.g., incompatibility or interoperability problems. The spurious events can be remediated in different ways, such as by applying a relaxed security policy. In a production mode, or 0-touch mode, when the protected software is subject to attacks, the corresponding remediation can be applied when the spurious events are again detected. Security events which occur in production mode can also be treated as benign when they occur within a specified time window. The applications and/or DLLs can further be classified according to whether they are known to have bad properties, known to be well-behaved, or unknown. Appropriate treatment is provided based on the classification.
摘要翻译：受保护的软件（如应用程序和/或DLL）由保护性软件监控，以防止攻击，同时区分虚假的良性事件和攻击。在一触式方法中，在测试环境中监视受保护的软件，以检测由例如不兼容性或互操作性问题引起的虚假，良性事件。虚假事件可以通过不同的方式进行修复，例如通过应用轻松的安全策略。在生产模式或0触摸模式下，当受保护的软件受到攻击时，当再次检测到杂散事件时，可以应用相应的修复。出现在生产模式下的安全事件也可以在指定的时间窗口内发生时被视为良性的。应用程序和/或DLL可以进一步根据它们是否已知具有不良属性（已知是良好的或未知的）进行分类。基于分类提供适当的治疗。

2. 发明授权

US08656497B2 Constraint injection system for immunizing software programs against vulnerabilities and attacks 有权
标题翻译：限制注射系统，用于免疫软件程序，防范漏洞和攻击
公开(公告)号：US08656497B2
公开(公告)日：2014-02-18
申请号：US13078470
申请日：2011-04-01
申请人： Saman P. Amarasinghe , Bharath Chandramohan , Charles Renert , Derek L. Bruening , Vladimir Kiriansky , Timothy Garnett , Sandy Wilbourn , Warren Wu
发明人： Saman P. Amarasinghe , Bharath Chandramohan , Charles Renert , Derek L. Bruening , Vladimir Kiriansky , Timothy Garnett , Sandy Wilbourn , Warren Wu
IPC分类号： G06F11/00
CPC分类号： G06F21/53 , G06F21/54 , G06F21/577
摘要： A constraint is inserted into a program to address a vulnerability of the program to attacks. The constraint includes a segment of code that determines when the program has been asked to execute a “corner case” which does not occur in normal operations. The constraint code can access a library of detector and remediator functions to detect various attacks and remediate against them. Optionally, the detector can be employed without the remediator for analysis. The context of the program can be saved and restored if necessary to continue operating after remediation is performed. The constraints can include descriptors, along with machine instructions or byte code, which indicate how the constraints are to be used.
摘要翻译：一个约束被插入到一个程序中，以解决该程序对攻击的脆弱性。约束包括一段代码，用于确定程序何时被要求执行在正常操作中不会发生的“角落”。约束代码可以访问检测器和修复器功能库，以检测各种攻击并对其进行补救。任选地，可以使用检测器而不用补救剂进行分析。如果需要，可以保存和恢复程序的上下文，以便在执行修复后继续运行。约束可以包括描述符，以及机器指令或字节代码，其指示如何使用约束。

3. 发明授权

US06711619B1 Method, system, and apparatus for distributing and using computer-based applications over a network 失效
标题翻译：用于通过网络分发和使用基于计算机的应用程序的方法，系统和装置
公开(公告)号：US06711619B1
公开(公告)日：2004-03-23
申请号：US09464351
申请日：1999-12-15
申请人： Bharath Chandramohan , Mahesh Ramachandran
发明人： Bharath Chandramohan , Mahesh Ramachandran
IPC分类号： G06F1516
CPC分类号： H04L29/06 , H04L67/34 , H04L67/42 , H04L69/329
摘要： A method, system, and apparatus for distributing and using portions of a computer-based application over a network, such as the internet. The present embodiment executes streamed chunks of code associated with an application on demand by binary emulation. Therefore the present invention enables execution of applications on network-based computer systems thereby enabling flexible distribution and use of executable code over a network. By streaming the transmission of non-sequentially ordered code chunks the present embodiment enables overlapping of streaming and execution of code chunks and reduces network latency effects of the past. The present embodiment may also speculatively stream the code chunks associated with the application to further reduce network latency effects associated with transmission of the code chunks.
摘要翻译：一种用于通过诸如因特网的网络分发和使用基于计算机的应用的部分的方法，系统和装置。本实施例通过二进制仿真来执行与应用程序相关联的码流。因此，本发明使得能够在基于网络的计算机系统上执行应用，从而使得能够在网络上灵活地分配和使用可执行代码。通过流传输非顺序排序的代码块的传输，本实施例使码流和码块的执行重叠，并减少过去的网络延迟效应。本实施例还可以推测性地流式传输与应用相关联的代码块，以进一步减少与代码块的传输相关联的网络延迟效应。

4. 发明授权

US07735136B2 0-touch and 1-touch techniques for improving the availability of computer programs under protection without compromising security 有权
标题翻译： 0触摸和1触摸技术，可以在不影响安全性的情况下改善计算机程序的可用性
公开(公告)号：US07735136B2
公开(公告)日：2010-06-08
申请号：US11406063
申请日：2006-04-18
申请人： Srinivas Mantripragada , Tim Garnett , Derek Bruening , Vladimir Kiriansky , Bharath Chandramohan , James Brink , Saman P. Amarasinghe , Sandy Wilbourn
发明人： Srinivas Mantripragada , Tim Garnett , Derek Bruening , Vladimir Kiriansky , Bharath Chandramohan , James Brink , Saman P. Amarasinghe , Sandy Wilbourn
IPC分类号： G06F12/14
CPC分类号： G06F21/51 , G06F21/52 , G06F21/55
摘要： Protected software, such as an application and/or DLL, is monitored by protective software to guard against attacks, while distinguishing spurious, benign events from attacks. In a 1-touch approach, the protected software is monitored in a testing environment to detect spurious, benign events caused by, e.g., incompatibility or interoperability problems. The spurious events can be remediated in different ways, such as by applying a relaxed security policy. In a production mode, or 0-touch mode, when the protected software is subject to attacks, the corresponding remediation can be applied when the spurious events are again detected. Security events which occur in production mode can also be treated as benign when they occur within a specified time window. The applications and/or DLLs can further be classified according to whether they are known to have bad properties, known to be well-behaved, or unknown. Appropriate treatment is provided based on the classification.
摘要翻译：受保护的软件（如应用程序和/或DLL）由保护性软件监控，以防止攻击，同时区分虚假的良性事件和攻击。在一触式方法中，在测试环境中监视受保护的软件，以检测由例如不兼容性或互操作性问题引起的虚假，良性事件。虚假事件可以通过不同的方式进行修复，例如通过应用轻松的安全策略。在生产模式或0触摸模式下，当受保护的软件受到攻击时，当再次检测到杂散事件时，可以应用相应的修复。出现在生产模式下的安全事件也可以在指定的时间窗口内发生时被视为良性的。应用程序和/或DLL可以进一步根据它们是否已知具有不良属性（已知是良好的或未知的）进行分类。基于分类提供适当的治疗。

5. 发明申请

US20060277539A1 CONSTRAINT INJECTION SYSTEM FOR IMMUNIZING SOFTWARE PROGRAMS AGAINST VULNERABILITIES AND ATTACKS 有权
标题翻译：免除易受攻击的软件程序的约束注射系统
公开(公告)号：US20060277539A1
公开(公告)日：2006-12-07
申请号：US11422547
申请日：2006-06-06
申请人： Saman Amarasinghe , Bharath Chandramohan , Charles Renert , Derek Bruening , Vladimir Kiriansky , Tim Garnett , Sandy Wilbourn , Warren Wu
发明人： Saman Amarasinghe , Bharath Chandramohan , Charles Renert , Derek Bruening , Vladimir Kiriansky , Tim Garnett , Sandy Wilbourn , Warren Wu
IPC分类号： G06F9/44
CPC分类号： G06F21/53 , G06F21/54 , G06F21/577
摘要： A constraint is inserted into a program to address a vulnerability of the program to attacks. The constraint includes a segment of code that determines when the program has been asked to execute a “corner case” which does not occur in normal operations. The constraint code can access a library of detector and remediator functions to detect various attacks and remediate against them. Optionally, the detector can be employed without the remediator for analysis. The context of the program can be saved and restored if necessary to continue operating after remediation is performed. The constraints can include descriptors, along with machine instructions or byte code, which indicate how the constraints are to be used.
摘要翻译：一个约束被插入到一个程序中，以解决该程序对攻击的脆弱性。约束包括一段代码，用于确定程序何时被要求执行在正常操作中不会发生的“角落”。约束代码可以访问检测器和修复器功能库，以检测各种攻击并对其进行补救。任选地，可以使用检测器而不用补救剂进行分析。如果需要，可以保存和恢复程序的上下文，以便在执行修复后继续运行。约束可以包括描述符，以及机器指令或字节代码，其指示如何使用约束。

6. 发明授权

US08966623B2 Managing execution of a running-page in a virtual machine 有权
标题翻译：管理虚拟机中正在运行的页面的执行
公开(公告)号：US08966623B2
公开(公告)日：2015-02-24
申请号：US13043264
申请日：2011-03-08
申请人： Oded Horovitz , Samuel Larsen , Gilad Arie Wolff , Marios Leventopoulos , Bharath Chandramohan
发明人： Oded Horovitz , Samuel Larsen , Gilad Arie Wolff , Marios Leventopoulos , Bharath Chandramohan
IPC分类号： G06F9/455
CPC分类号： G06F9/45533
摘要： Computer implemented methods, system and apparatus for managing execution of a running-page in a virtual machine include associating an execution trace code with the running page by a security virtual machine. The execution trace code generates a notification upon initiation of the execution of the running page by the virtual machine. The notification is received by the security virtual machine running independent of the virtual machine executing the running-page. The running page associated with the execution trace code is validated by the security virtual machine as authorized for execution. An exception is generated if the running-page is not authorized for execution. The generated exception is to prevent the execution of the running page in the virtual machine.
摘要翻译：用于管理虚拟机中的运行页面的执行的计算机实现的方法，系统和装置包括通过安全虚拟机将执行跟踪代码与运行页面相关联。执行跟踪代码在虚拟机启动运行的页面时生成通知。安全虚拟机接收的通知是独立于执行运行页面的虚拟机运行的。与执行跟踪代码相关联的运行页面被安全虚拟机验证为授权执行。如果运行页面未被授权执行，则会生成异常。生成的异常是为了防止在虚拟机中执行正在运行的页面。

7. 发明授权

US07945958B2 Constraint injection system for immunizing software programs against vulnerabilities and attacks 有权
标题翻译：限制注射系统，用于免疫软件程序，防范漏洞和攻击
公开(公告)号：US07945958B2
公开(公告)日：2011-05-17
申请号：US11422547
申请日：2006-06-06
申请人： Saman P. Amarasinghe , Bharath Chandramohan , Charles Renert , Derek L. Bruening , Vladimir L. Kiriansky , Tim Garnett , Sandy Wilbourn , Warren Wu
发明人： Saman P. Amarasinghe , Bharath Chandramohan , Charles Renert , Derek L. Bruening , Vladimir L. Kiriansky , Tim Garnett , Sandy Wilbourn , Warren Wu
IPC分类号： G06F11/00
CPC分类号： G06F21/53 , G06F21/54 , G06F21/577
摘要： A constraint is inserted into a program to address a vulnerability of the program to attacks. The constraint includes a segment of code that determines when the program has been asked to execute a “corner case” which does not occur in normal operations. The constraint code can access a library of detector and remediator functions to detect various attacks and remediate against them. Optionally, the detector can be employed without the remediator for analysis. The context of the program can be saved and restored if necessary to continue operating after remediation is performed. The constraints can include descriptors, along with machine instructions or byte code, which indicate how the constraints are to be used.
摘要翻译：一个约束被插入到一个程序中，以解决该程序对攻击的脆弱性。约束包括一段代码，用于确定程序何时被要求执行在正常操作中不会发生的“角落”。约束代码可以访问检测器和修复器功能库，以检测各种攻击并对其进行补救。任选地，可以使用检测器而不用补救剂进行分析。如果需要，可以保存和恢复程序的上下文，以便在执行修复后继续运行。约束可以包括描述符，以及机器指令或字节代码，其指示如何使用约束。

8. 发明申请

US20060288420A1 0-Touch and 1-touch techniques for improving the availability of computer programs under protection without compromising security 有权
标题翻译： 0-Touch和1-touch技术，用于在不影响安全性的情况下提高计算机程序的可用性
公开(公告)号：US20060288420A1
公开(公告)日：2006-12-21
申请号：US11406063
申请日：2006-04-18
申请人： Srinivas Mantripragada , Tim Garnett , Derek Bruening , Vladimir Kiriansky , Bharath Chandramohan , James Brink , Saman Amarasinghe , Sandy Wilbourn
发明人： Srinivas Mantripragada , Tim Garnett , Derek Bruening , Vladimir Kiriansky , Bharath Chandramohan , James Brink , Saman Amarasinghe , Sandy Wilbourn
IPC分类号： G06F11/00 , G06F12/14
CPC分类号： G06F21/51 , G06F21/52 , G06F21/55
摘要： Protected software, such as an application and/or DLL, is monitored by protective software to guard against attacks, while distinguishing spurious, benign events from attacks. In a 1-touch approach, the protected software is monitored in a testing environment to detect spurious, benign events caused by, e.g., incompatibility or interoperability problems. The spurious events can be remediated in different ways, such as by applying a relaxed security policy. In a production mode, or 0-touch mode, when the protected software is subject to attacks, the corresponding remediation can be applied when the spurious events are again detected. Security events which occur in production mode can also be treated as benign when they occur within a specified time window. The applications and/or DLLs can further be classified according to whether they are known to have bad properties, known to be well-behaved, or unknown. Appropriate treatment is provided based on the classification.
摘要翻译：受保护的软件（如应用程序和/或DLL）由保护性软件监控，以防止攻击，同时区分虚假的良性事件和攻击。在一触式方法中，在测试环境中监视受保护的软件，以检测由例如不兼容性或互操作性问题引起的假的，良性的事件。虚假事件可以通过不同的方式进行修复，例如通过应用轻松的安全策略。在生产模式或0触摸模式下，当受保护的软件受到攻击时，当再次检测到杂散事件时，可以应用相应的修复。出现在生产模式下的安全事件也可以在指定的时间窗口内发生时被视为良性的。应用程序和/或DLL可以进一步根据它们是否已知具有不良属性（已知是良好的或未知的）进行分类。基于分类提供适当的治疗。

9. 发明授权

US08171548B2 0-touch and 1-touch techniques for improving the availability of computer programs under protection without compromising security 有权
标题翻译： 0触摸和1触摸技术，可以在不影响安全性的情况下改善计算机程序的可用性
公开(公告)号：US08171548B2
公开(公告)日：2012-05-01
申请号：US12764622
申请日：2010-04-21
申请人： Srinivas Mantripragada , Timothy Garnett , Derek L. Bruening , Vladimir Kiriansky , Bharath Chandramohan , James Brink , Saman P. Amarasinghe , Sandy Wilbourn
发明人： Srinivas Mantripragada , Timothy Garnett , Derek L. Bruening , Vladimir Kiriansky , Bharath Chandramohan , James Brink , Saman P. Amarasinghe , Sandy Wilbourn
IPC分类号： G06F12/14
CPC分类号： G06F21/51 , G06F21/52 , G06F21/55
摘要： Protected software, such as an application and/or DLL, is monitored by protective software to guard against attacks, while distinguishing spurious, benign events from attacks. In a 1-touch approach, the protected software is monitored in a testing environment to detect spurious, benign events caused by, e.g., incompatibility or interoperability problems. The spurious events can be remediated in different ways, such as by applying a relaxed security policy. In a production mode, or 0-touch mode, when the protected software is subject to attacks, the corresponding remediation can be applied when the spurious events are again detected. Security events which occur in production mode can also be treated as benign when they occur within a specified time window. The applications and/or DLLs can further be classified according to whether they are known to have bad properties, known to be well-behaved, or unknown. Appropriate treatment is provided based on the classification.
摘要翻译：受保护的软件（如应用程序和/或DLL）由保护性软件监控，以防止攻击，同时区分虚假的良性事件和攻击。在一触式方法中，在测试环境中监视受保护的软件，以检测由例如不兼容性或互操作性问题引起的虚假，良性事件。虚假事件可以通过不同的方式进行修复，例如通过应用轻松的安全策略。在生产模式或0触摸模式下，当受保护的软件受到攻击时，当再次检测到杂散事件时，可以应用相应的修复。出现在生产模式下的安全事件也可以在指定的时间窗口内发生时被视为良性的。应用程序和/或DLL可以进一步根据它们是否已知具有不良属性（已知是良好的或未知的）进行分类。基于分类提供适当的治疗。

10. 发明申请

US20110219447A1 Identification of Unauthorized Code Running in an Operating System's Kernel 有权
标题翻译：识别在操作系统内核中运行的未经授权的代码
公开(公告)号：US20110219447A1
公开(公告)日：2011-09-08
申请号：US13043264
申请日：2011-03-08
申请人： Oded HOROVITZ , Samuel LARSEN , Gilad Arie WOLFF , Marios LEVENTOPOULOS , Bharath CHANDRAMOHAN
发明人： Oded HOROVITZ , Samuel LARSEN , Gilad Arie WOLFF , Marios LEVENTOPOULOS , Bharath CHANDRAMOHAN
IPC分类号： G06F21/22
CPC分类号： G06F9/45533
摘要： Computer implemented methods, system and apparatus for managing execution of a running-page in a virtual machine include associating an execution trace code with the running page by a security virtual machine. The execution trace code generates a notification upon initiation of the execution of the running page by the virtual machine. The notification is received by the security virtual machine running independent of the virtual machine executing the running-page. The running page associated with the execution trace code is validated by the security virtual machine as authorized for execution. An exception is generated if the running-page is not authorized for execution. The generated exception is to prevent the execution of the running page in the virtual machine.
摘要翻译：用于管理虚拟机中的运行页面的执行的计算机实现的方法，系统和装置包括通过安全虚拟机将执行跟踪代码与运行页面相关联。执行跟踪代码在虚拟机启动运行的页面时生成通知。安全虚拟机接收的通知是独立于执行运行页面的虚拟机运行的。与执行跟踪代码相关联的运行页面被安全虚拟机验证为授权执行。如果运行页面未被授权执行，则会生成异常。生成的异常是为了防止在虚拟机中执行正在运行的页面。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式