专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07779480B2 Identifying dependencies of an application upon a given security context 有权
公开(公告)号：US07779480B2
公开(公告)日：2010-08-17
申请号：US11214125
申请日：2005-08-29
申请人： Chad E Verbowski , John D. Dunagan , Shuo Chen , Yi-Min Wang
发明人： Chad E Verbowski , John D. Dunagan , Shuo Chen , Yi-Min Wang
IPC分类号： G06F21/00 , G06F17/30
CPC分类号： G06F21/6218 , G06F2221/2101
摘要： A technique for identifying dependencies of an application upon a given security context includes monitoring security checks generated by the application. The security checks requiring elevated rights are identified and the state of execution of the application corresponding to the identified security checks may be logged. The security checks requiring elevated rights may be identified by monitoring access checks, monitoring privilege checks, checking user/group identifiers against a list of known identifiers associated with elevated rights, or the like.

2. 发明授权

US07620995B2 Identifying dependencies of an application upon a given security context 有权
标题翻译：识别应用程序在给定安全上下文中的依赖关系
公开(公告)号：US07620995B2
公开(公告)日：2009-11-17
申请号：US11214131
申请日：2005-08-29
申请人： Chad E Verbowski , John D. Dunagan , Shuo Chen , Yi-Min Wang
发明人： Chad E Verbowski , John D. Dunagan , Shuo Chen , Yi-Min Wang
IPC分类号： G06F7/04 , G06F17/30
CPC分类号： G06F21/6218 , G06F2221/2101
摘要： A technique for identifying dependencies of an application upon a given security context includes monitoring security checks generated by the application. The security checks requiring elevated rights are identified and the state of execution of the application corresponding to the identified security checks may be logged. The security checks requiring elevated rights may be identified by monitoring access checks, monitoring privilege checks, checking user/group identifiers against a list of known identifiers associated with elevated rights, or the like.
摘要翻译：用于在给定的安全上下文中识别应用的依赖性的技术包括监视应用产生的安全检查。识别需要提升权限的安全检查，并且可能会记录与识别的安全检查对应的应用程序的执行状态。可以通过监视访问检查，监视特权检查，针对与提升的权限相关联的已知标识符的列表等来检查用户/组标识符来识别需要提高权限的安全检查。

3. 发明授权

US07784101B2 Identifying dependencies of an application upon a given security context 有权
标题翻译：识别应用程序在给定安全上下文中的依赖关系
公开(公告)号：US07784101B2
公开(公告)日：2010-08-24
申请号：US11214123
申请日：2005-08-29
申请人： Chad E Verbowski , John D. Dungan , Shuo Chen , Yi-Min Wang
发明人： Chad E Verbowski , John D. Dungan , Shuo Chen , Yi-Min Wang
IPC分类号： G06F21/00 , G06F17/30
CPC分类号： G06F21/6218 , G06F2221/2101
摘要： A technique for identifying dependencies of an application upon a given security context includes monitoring security checks generated by the application. The security checks requiring elevated rights are identified and the state of execution of the application corresponding to the identified security checks may be logged. The security checks requiring elevated rights may be identified by monitoring access checks, monitoring privilege checks, checking user/group identifiers against a list of known identifiers associated with elevated rights, or the like.
摘要翻译：用于在给定的安全上下文中识别应用的依赖性的技术包括监视应用产生的安全检查。识别需要提升权限的安全检查，并且可能会记录与识别的安全检查对应的应用程序的执行状态。可以通过监视访问检查，监视特权检查，针对与提升的权限相关联的已知标识符的列表等来检查用户/组标识符来识别需要提高权限的安全检查。

4. 发明授权

US07765592B2 Changed file identification, software conflict resolution and unwanted file removal 失效
标题翻译：更改文件识别，软件冲突解决和不需要的文件删除
公开(公告)号：US07765592B2
公开(公告)日：2010-07-27
申请号：US10830334
申请日：2004-04-22
申请人： Yi-Min Wang , Aaron R. Johnson , David C. Ladd , Roussi A. Roussev , Chad E. Verbowski
发明人： Yi-Min Wang , Aaron R. Johnson , David C. Ladd , Roussi A. Roussev , Chad E. Verbowski
IPC分类号： G06F21/00 , G06F12/14
CPC分类号： G06F9/44505 , G06F8/65
摘要： As computer programs grow more complex, extensible, and connected, it becomes increasingly difficult for users to understand what has changed on their machines and what impact those changes have. An embodiment of the invention is described via a software tool, called AskStrider, that answers those questions by correlating volatile process information with persistent-state context information and change history. AskStrider scans a system for active components, matches them against a change log to identify recently updated and hence more interesting state, and searches for context information to help users understand the changes. Several real-world cases are provided to demonstrate the effectiveness of using AskStrider to quickly identify the presence of unwanted software, to determine if a software patch is potentially breaking an application, and to detect lingering components left over from an unclean uninstallation.
摘要翻译：随着计算机程序变得越来越复杂，可扩展和连接，用户越来越难以了解机器上发生了什么变化，以及这些更改有什么影响。通过称为AskStrider的软件工具来描述本发明的实施例，其通过将易失性进程信息与持久状态上下文信息和变化历史相关联来回答这些问题。 AskStrider扫描系统中的活动组件，将其与更改日志进行匹配，以识别最近更新并因此更有趣的状态，并搜索上下文信息以帮助用户了解更改。提供了几个真实案例来证明使用AskStrider快速识别不需要的软件的存在，确定软件补丁是否潜在地破坏应用程序，以及检测从不洁净卸载中遗留的剩余部件的有效性。

5. 发明授权

US07200675B2 Summary-based routing for content-based event distribution networks 有权
标题翻译：基于内容的事件分发网络的基于摘要的路由
公开(公告)号：US07200675B2
公开(公告)日：2007-04-03
申请号：US10389623
申请日：2003-03-14
申请人： Yi-Min Wang , Lili Qiu , Chad E. Verbowski , Demetrios Achlioptas , Gautam Das , Per-Ake Larson
发明人： Yi-Min Wang , Lili Qiu , Chad E. Verbowski , Demetrios Achlioptas , Gautam Das , Per-Ake Larson
IPC分类号： G06F15/173 , G06F15/16
CPC分类号： H04L29/06 , H04L12/1859 , H04L67/327 , H04L69/329
摘要： A system and method for enabling highly scalable multi-node event distribution networks through the use of summary-based routing, particularly event distribution networks using a content-based publish/subscribe model to distribute information. By allowing event routers to use imprecise summaries of the subscriptions hosted by matcher nodes, an event router can eliminate itself as a bottleneck thus improving overall event distribution network throughput even though the use of imprecise summaries results in some false positive event traffic. False positive event traffic is reduced by using a filter set partitioning that provides for good subscription set locality at each matcher node, while at the same time avoiding overloading any one matcher node. Good subscription set locality is maintained by routing new subscriptions to a matcher node with a subscription summary that best covers the new subscription. Where event space partitioning is desirable, an over-partitioning scheme is described that enables load balancing without repartitioning.
摘要翻译：一种通过使用基于摘要的路由，特别是使用基于内容的发布/订阅模型来分发信息的事件分发网络来实现高度可扩展的多节点事件分发网络的系统和方法。通过允许事件路由器使用由匹配器节点托管的订阅的不精确的摘要，事件路由器可以将自身消除为瓶颈，从而改善整体事件分发网络吞吐量，即使使用不精确的摘要导致一些假阳性事件流量。通过使用在每个匹配器节点处提供良好订阅集位置的过滤器集分割来减少假正事件流量，同时避免任何一个匹配器节点的过载。通过将新的订阅路由到具有最佳覆盖新订阅的订阅摘要的匹配器节点来维护良好的订阅集位置。在需要事件空间分区的情况下，描述了能够进行负载均衡而不进行重新分区的过分配方案。

6. 发明授权

US07614046B2 Method and system for analyzing the impact of a software update 有权
标题翻译：分析软件更新影响的方法和系统
公开(公告)号：US07614046B2
公开(公告)日：2009-11-03
申请号：US10997685
申请日：2004-11-24
申请人： Bradford Ruffin Daniels , John Dunagan , Roussi A. Roussev , Chad E. Verbowski , Yi-Min Wang
发明人： Bradford Ruffin Daniels , John Dunagan , Roussi A. Roussev , Chad E. Verbowski , Yi-Min Wang
IPC分类号： G06F9/44
CPC分类号： G06F8/658
摘要： A method and system for analyzing the impact on software of an update to a software system is provided. The impact analysis system identifies resources that are affected by an update to the software system and identifies resources that are accessed by various software components during execution of the software components. To analyze the effects of an update, the impact analysis system identifies those accessed resources of the software components that are affected by the update as being impacted resources. The impact analysis system considers those software components that access the impacted resources to be impacted software components. The impact analysis system provides a user interface through which a user can view and analyze the impact of an update.
摘要翻译：提供了一种用于分析对软件对软件的影响的方法和系统。影响分析系统识别受软件系统更新影响的资源，并识别在执行软件组件期间由各种软件组件访问的资源。为了分析更新的影响，影响分析系统将受更新影响的软件组件的访问资源识别为受影响的资源。影响分析系统认为访问受影响资源的软件组件会影响软件组件。影响分析系统提供用户界面，通过该界面，用户可以查看和分析更新的影响。

7. 发明授权

US07627898B2 Method and system for detecting infection of an operating system 有权
标题翻译：检测操作系统感染的方法和系统
公开(公告)号：US07627898B2
公开(公告)日：2009-12-01
申请号：US10997768
申请日：2004-11-23
申请人： Douglas Reed Beck , Aaron Roy Johnson , Roussi A. Roussev , Chad E. Verbowski , Binh Dou Vo , Yi-Min Wang
发明人： Douglas Reed Beck , Aaron Roy Johnson , Roussi A. Roussev , Chad E. Verbowski , Binh Dou Vo , Yi-Min Wang
IPC分类号： G08B23/00
CPC分类号： G06F21/565
摘要： A method and system for detecting that a software system has been infected by software that attempts to hide properties related to the software system is provided. A detection system identifies that a suspect operating system has been infected by malware by comparing properties related to the suspect operating system as reported by the suspect operating system to properties as reported by another operating system that is assumed to be clean. The detection system compares the reported properties to the actual properties to identify any significant differences. A significant difference, such as the presence of an actual file not reported by the suspect operating system, may indicate that the suspect storage device is infected.
摘要翻译：提供了一种用于检测软件系统已经被试图隐藏与软件系统相关的属性的软件感染的方法和系统。检测系统通过将可疑操作系统报告的与可疑操作系统相关的属性与被假设为干净的另一个操作系统报告的属性进行比较来识别可疑操作系统已被恶意软件感染。检测系统将报告的属性与实际属性进行比较，以确定任何显着差异。一个显着的差异，如可疑操作系统未报告的实际文件的存在，可能会指示可疑存储设备被感染。

8. 发明授权

US08539585B2 Systematic approach to uncover visual ambiguity vulnerabilities 有权
标题翻译：发现视觉模糊漏洞的系统方法
公开(公告)号：US08539585B2
公开(公告)日：2013-09-17
申请号：US11768134
申请日：2007-06-25
申请人： Shuo Chen , Ralf Sasse , Jiahe Helen Wang , Yi-Min Wang
发明人： Shuo Chen , Ralf Sasse , Jiahe Helen Wang , Yi-Min Wang
IPC分类号： G06F21/00
CPC分类号： G06F11/3608 , G06F21/577 , G06F21/83
摘要： To achieve end-to-end security, traditional machine-to-machine security measures are insufficient if the integrity of the graphical user interface (GUI) is compromised. GUI logic flaws are a category of software vulnerabilities that result from logic flaws in GUI implementation. The invention described here is a technology for uncovering these flaws using a systematic reasoning approach. Major steps in the technology include: (1) mapping a visual invariant to a program invariant; (2) formally modeling the program logic, the user actions and the execution context, and systematically exploring the possibilities of violations of the program invariant; (3) finding real spoofing attacks based on the exploration.
摘要翻译：为了实现端到端的安全性，如果图形用户界面（GUI）的完整性受到损害，则传统的机器对机器的安全措施是不够的。 GUI逻辑缺陷是由GUI实现中的逻辑缺陷引起的一类软件漏洞。这里描述的发明是使用系统推理方法揭露这些缺陷的技术。该技术的主要步骤包括：（1）将视觉不变量映射到程序不变; （2）对程序逻辑，用户动作和执行上下文进行正式建模，并系统地探索违反程序不变的可能性; （3）根据探索找到真正的欺骗攻击。

9. 发明申请

US20080134338A1 Systematic Approach to Uncover GUI Logic Flaws 有权
公开(公告)号：US20080134338A1
公开(公告)日：2008-06-05
申请号：US11565426
申请日：2006-11-30
申请人： Shuo Chen , Jose Meseguer , Ralf Sasse , Jiahe Helen Wang , Yi-Min Wang
发明人： Shuo Chen , Jose Meseguer , Ralf Sasse , Jiahe Helen Wang , Yi-Min Wang
IPC分类号： G08B23/00
CPC分类号： G06F11/3608 , G06F21/577 , G06F21/83
摘要： To achieve end-to-end security, traditional machine-to-machine security measures are insufficient if the integrity of the graphical user interface (GUI) is compromised. GUI logic flaws are a category of software vulnerabilities that result from logic flaws in GUI implementation. The invention described here is a technology for uncovering these flaws using a systematic reasoning approach. Major steps in the technology include: (1) mapping a visual invariant to a program invariant; (2) formally modeling the program logic, the user actions and the execution context, and systematically exploring the possibilities of violations of the program invariant; (3) finding real spoofing attacks based on the exploration.

10. 发明申请

US20080133976A1 Systematic Approach to Uncover Visual Ambiguity Vulnerabilities 有权
标题翻译：揭示视觉模糊性脆弱性的系统方法
公开(公告)号：US20080133976A1
公开(公告)日：2008-06-05
申请号：US11768134
申请日：2007-06-25
申请人： Shuo Chen , Yi-Min Wang , Ralf Sasse , Jiahe Helen Wang
发明人： Shuo Chen , Yi-Min Wang , Ralf Sasse , Jiahe Helen Wang
IPC分类号： G06F11/36
CPC分类号： G06F11/3608 , G06F21/577 , G06F21/83
摘要： To achieve end-to-end security, traditional machine-to-machine security measures are insufficient if the integrity of the graphical user interface (GUI) is compromised. GUI logic flaws are a category of software vulnerabilities that result from logic flaws in GUI implementation. The invention described here is a technology for uncovering these flaws using a systematic reasoning approach. Major steps in the technology include: (1) mapping a visual invariant to a program invariant; (2) formally modeling the program logic, the user actions and the execution context, and systematically exploring the possibilities of violations of the program invariant; (3) finding real spoofing attacks based on the exploration.
摘要翻译：为了实现端到端的安全性，如果图形用户界面（GUI）的完整性受到损害，则传统的机器对机器的安全措施是不够的。 GUI逻辑缺陷是由GUI实现中的逻辑缺陷引起的一类软件漏洞。这里描述的发明是使用系统推理方法揭露这些缺陷的技术。该技术的主要步骤包括：（1）将视觉不变量映射到程序不变; （2）对程序逻辑，用户动作和执行上下文进行正式建模，并系统地探索违反程序不变的可能性; （3）根据探索找到真正的欺骗攻击。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式