专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08375443B1 Code annotations for preventing access to unsafe functionality 失效
标题翻译：用于防止访问不安全功能的代码注释
公开(公告)号：US08375443B1
公开(公告)日：2013-02-12
申请号：US13246786
申请日：2011-09-27
申请人： Charles Reis , Peter Hallam , Loren Kohnfelder
发明人： Charles Reis , Peter Hallam , Loren Kohnfelder
IPC分类号： G06F11/00
CPC分类号： G06F21/53
摘要： A safe environment is established for running untrusted code in a system whose trusted libraries include native code. Annotations are applied to code in the system libraries to identify safe and unsafe code, and analysis tools reveal whether code outside the system libraries is able to trigger any unsafe behavior.
摘要翻译：建立了一个安全的环境，用于在受信任的库包括本地代码的系统中运行不受信任的代码。注释应用于系统库中的代码，以识别安全和不安全的代码，分析工具可以显示系统库外的代码是否能够触发任何不安全的行为。

2. 发明申请

US20070016949A1 Browser Protection Module 有权
标题翻译：浏览器保护模块
公开(公告)号：US20070016949A1
公开(公告)日：2007-01-18
申请号：US11426785
申请日：2006-06-27
申请人： John Dunagan , Opher Dubrovsky , Saher Esmeir , Charles Reis , Jiahe Wang
发明人： John Dunagan , Opher Dubrovsky , Saher Esmeir , Charles Reis , Jiahe Wang
IPC分类号： G06F12/14 , G06F11/00
CPC分类号： G06F21/53 , G06F21/51 , G06F21/6263 , G06F2221/2119
摘要： An exemplary computer-implementable method (300) transforms information to reduce or eliminate risk of exploitation of a software service and includes receiving information (304) in response to a request, transforming the information (308) to produce transformed information and sending the transformed information (312). An exemplary firewall server (112) includes server software (144, 148) that allows the firewall server (112) to receive information from a resource (104, 108) via a network and to send information to a client computer (114) and a browser protection component (264, 268) for transforming the information to prevent exploitation of a vulnerability of browser software (154) on the client computer (114). Various other exemplary methods, devices, systems, etc., are also disclosed.
摘要翻译：示例性的可计算机可实现的方法（300）转换信息以减少或消除利用软件服务的风险，并且包括响应于请求的接收信息（304），变换信息（308）以产生变换的信息并发送变换的信息（312）。示例性防火墙服务器（112）包括服务器软件（144,148），其允许防火墙服务器（112）经由网络从资源（104,108）接收信息，并将信息发送到客户端计算机（114）和浏览器保护组件（264,268），用于转换信息以防止利用客户端计算机（114）上的浏览器软件（154）的漏洞。还公开了各种其它示例性方法，装置，系统等。

3. 发明授权

US08910277B1 Process-based domain isolation 有权
标题翻译：基于流程的域隔离
公开(公告)号：US08910277B1
公开(公告)日：2014-12-09
申请号：US12976491
申请日：2010-12-22
申请人： Charles Reis , Darin Fisher , Adam Barth , Christian Lewis Evans
发明人： Charles Reis , Darin Fisher , Adam Barth , Christian Lewis Evans
IPC分类号： G06F11/00
CPC分类号： G06F9/54 , G06F9/468 , G06F21/53 , G06F21/606
摘要： Systems, methods and articles of manufacture for process-based domain isolation are discussed herein. A method embodiment includes determining domains associated with a plurality of content areas and rendering content areas associated with different domains into separate processes, wherein each domain from the one or more domains is associated with a separate process that communicates with its respective individual domain. The method further comprises identifying browsing instances including content areas that can script each other, identifying site instances including content areas sharing a common domain, and controlling communication between content areas across the identified site instances within each browsing instance.
摘要翻译：本文讨论了基于过程的域隔离的系统，方法和制造。方法实施例包括确定与多个内容区域相关联的域并将与不同域相关联的内容区域渲染为单独的进程，其中来自一个或多个域的每个域与与其各自的域相通的单独进程相关联。该方法还包括识别浏览实例，其包括可彼此脚本化的内容区域，识别包括共享公共域的内容区域的站点实例，以及控制每个浏览实例内的所识别站点实例之间的内容区域之间的通信。

4. 发明授权

US08484465B1 Heterogeneous virtual machines sharing a security model 有权
公开(公告)号：US08484465B1
公开(公告)日：2013-07-09
申请号：US13313569
申请日：2011-12-07
申请人： Charles Reis , Adam Barth
发明人： Charles Reis , Adam Barth
IPC分类号： H04L29/06
CPC分类号： G06F21/6209 , G06F21/62 , H04L63/20 , H04L67/02 , H04L67/40
摘要： Methods and systems for sharing a security model with heterogeneous virtual machines (VMs) are provided. A method for sharing a security model with heterogeneous VMs may include making a direct function call to an object model from each of two or more heterogeneous VMs using a direct binding generated for the respective VM based on the respective VM and a security policy. The direct bindings of the two or more heterogeneous VMs share the security policy. The method may also include ensuring only one of the two or more heterogeneous VMs interacts with the object model at a time. A system for sharing a security model with heterogeneous VMs may include a heterogeneous VM manager and a heterogeneous VM scheduler. The system may further include a principal tracker and a proxy component.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式