会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 8. 发明授权
    • Managing device driver cross ring accesses
    • 管理设备驱动程序交叉环路访问
    • US09183391B2
    • 2015-11-10
    • US13997790
    • 2013-03-13
    • Adriaan Van De VenBaiju V. Patel
    • Adriaan Van De VenBaiju V. Patel
    • G06F11/00G06F12/14G06F12/16G08B23/00G06F21/56
    • G06F21/56G06F12/1491G06F21/564G06F21/74G06F2212/1052G06F2221/2113
    • Technologies managing cross ring memory accesses by a device driver on a computing device includes configuring a memory page table associated with the device driver to disable cross ring memory accesses by the device driver, trapping attempted cross ring memory accesses by the device driver, and denying the attempted cross ring memory access if the device driver is determined to be malicious. If the device driver is determined not to be malicious, the memory page table is updated to allow the attempted cross ring memory access. The device driver may be analyzed to determine whether the device driver is malicious by comparing the device driver and the attempted cross ring memory access to security data, such as a device driver fingerprint and/or cross ring memory access heuristics, stored on the computing device.
    • 管理计算设备上的设备驱动器的交叉环存储器访问的技术包括配置与设备驱动程序相关联的存储器页表,以禁用设备驱动程序的交叉环存储器访问,捕获设备驱动程序尝试的交叉环存储器访问,以及拒绝 如果设备驱动程序被确定为恶意,则尝试跨环内存访问。 如果设备驱动程序被确定为不恶意,则更新内存页表以允许尝试的交叉环内存访问。 可以分析设备驱动程序以通过将设备驱动程序和尝试的交叉环存储器访问与存储在计算设备上的安全数据(诸如设备驱动程序指纹和/或交叉环存储器访问启发式)进行比较来确定设备驱动程序是否是恶意的 。