专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20100043048A1 System, Method, and Apparatus for Modular, String-Sensitive, Access Rights Analysis with Demand-Driven Precision 有权
标题翻译：用于采用需求驱动精度的模块化，字符串敏感的访问权限分析的系统，方法和装置
公开(公告)号：US20100043048A1
公开(公告)日：2010-02-18
申请号：US12190718
申请日：2008-08-13
申请人： Julian Timothy Dolby , Emmanuel Geay , Marco Pistoia , Barbara G. Ryder , Takaaki Tateishi
发明人： Julian Timothy Dolby , Emmanuel Geay , Marco Pistoia , Barbara G. Ryder , Takaaki Tateishi
IPC分类号： G06F21/00
CPC分类号： G06F21/57 , G06F21/53 , G06F21/6218
摘要： A static analysis for identification of permission-requirements on stack-inspection authorization systems is provided. The analysis employs functional modularity for improved scalability. To enhance precision, the analysis utilizes program slicing to detect the origin of each parameter passed to a security-sensitive function. Furthermore, since strings are essential when defining permissions, the analysis integrates a sophisticated string analysis that models string computations.
摘要翻译：提供了一个用于识别堆栈检查授权系统的许可要求的静态分析。该分析采用功能模块化，以提高可扩展性。为了提高精度，分析使用程序分片来检测传递给安全敏感功能的每个参数的原点。此外，由于字符串在定义权限时至关重要，因此分析集成了一个用于模拟字符串计算的复杂字符串分析。

2. 发明授权

US08572674B2 System, method, and apparatus for modular, string-sensitive, access rights analysis with demand-driven precision 有权
标题翻译：用于采用需求驱动精度的模块化，字符串敏感的访问权限分析的系统，方法和设备
公开(公告)号：US08572674B2
公开(公告)日：2013-10-29
申请号：US12190718
申请日：2008-08-13
申请人： Julian Timothy Dolby , Emmanuel Geay , Marco Pistoia , Barbara G. Ryder , Takaaki Tateishi
发明人： Julian Timothy Dolby , Emmanuel Geay , Marco Pistoia , Barbara G. Ryder , Takaaki Tateishi
IPC分类号： H04L29/06
CPC分类号： G06F21/57 , G06F21/53 , G06F21/6218
摘要： A static analysis for identification of permission-requirements on stack-inspection authorization systems is provided. The analysis employs functional modularity for improved scalability. To enhance precision, the analysis utilizes program slicing to detect the origin of each parameter passed to a security-sensitive function. Furthermore, since strings are essential when defining permissions, the analysis integrates a sophisticated string analysis that models string computations.
摘要翻译：提供了一个用于识别堆栈检查授权系统的许可要求的静态分析。该分析采用功能模块化，以提高可扩展性。为了提高精度，分析使用程序分片来检测传递给安全敏感功能的每个参数的原点。此外，由于字符串在定义权限时至关重要，因此分析集成了一个用于模拟字符串计算的复杂字符串分析。

3. 发明授权

US08533659B2 Efficient extraction of software dependencies from program code 有权
公开(公告)号：US08533659B2
公开(公告)日：2013-09-10
申请号：US12511506
申请日：2009-07-29
申请人： Nikolai A. Joukov , Birgit M. Pfitzmann , Marco Pistoia , Vasily Tarasov , Takaaki Tateishi , Norbert G. Vogl
发明人： Nikolai A. Joukov , Birgit M. Pfitzmann , Marco Pistoia , Vasily Tarasov , Takaaki Tateishi , Norbert G. Vogl
IPC分类号： G06F9/44
CPC分类号： G06F11/3692 , G06F8/70
摘要： Calls to stop functions are identified in a computer program file. The stop functions are functions that interact with external resources. Parameters of the calls to the stop functions that are references to the external resources are identified. An analysis is performed over the computer program file to find out possible values of the parameters of the calls.

4. 发明申请

US20130091079A1 USING A HEURISTICALLY-GENERATED POLICY TO DYNAMICALLY SELECT STRING ANALYSIS ALGORITHMS FOR CLIENT QUERIES 有权
标题翻译：使用全景生成策略动态选择客户端查询的分析算法
公开(公告)号：US20130091079A1
公开(公告)日：2013-04-11
申请号：US13412121
申请日：2012-03-05
申请人： Marco Pistoia , Takaaki Tateishi , Omer Tripp
发明人： Marco Pistoia , Takaaki Tateishi , Omer Tripp
IPC分类号： G06F15/18
CPC分类号： G06N5/00
摘要： A method for dynamically selecting string analysis algorithms can begin with the training of the dynamic string analysis handler of a string analysis module to effectively handle a subset of string queries having contextual metadata received from a client application in an instructional environment. The effectiveness of the training module can be based upon feedback from the client application. Upon completion of the training, a string analysis algorithm selection policy can be synthesized. The string analysis algorithm selection policy can correlate a context of a string query in the subset to the usage of a string analysis algorithm. When in the operational environment, the dynamic string analysis handler can dynamically handle string queries having contextual metadata received from the client application in accordance with the string analysis algorithm selection policy. The string analysis algorithm to be used for a string query can be dynamically and independently determined.
摘要翻译：用于动态选择字符串分析算法的方法可以开始于字符串分析模块的动态字符串分析处理程序的训练，以有效地处理在教学环境中从客户端应用程序接收的具有上下文元数据的字符串查询的子集。培训模块的有效性可以基于客户端应用程序的反馈。完成培训后，可以合成字符串分析算法选择策略。字符串分析算法选择策略可以将子集中的字符串查询的上下文与字符串分析算法的使用相关联。在操作环境中，动态字符串分析处理程序可以根据字符串分析算法选择策略来动态地处理具有从客户端应用程序接收的上下文元数据的字符串查询。用于字符串查询的字符串分析算法可以动态和独立地确定。

5. 发明授权

US08365281B2 Determining whether method of computer program is a validator 失效
标题翻译：确定计算机程序的方法是否为验证程序
公开(公告)号：US08365281B2
公开(公告)日：2013-01-29
申请号：US12950432
申请日：2010-11-19
申请人： Takaaki Tateishi , Marco Pistoia , Omer Tripp , Ryan Berg , Robert Wiener
发明人： Takaaki Tateishi , Marco Pistoia , Omer Tripp , Ryan Berg , Robert Wiener
IPC分类号： G06F11/00 , G06F11/30 , H04L29/06 , H04L9/32
CPC分类号： G06F21/50 , G06F21/563
摘要： An illegal pattern and a computer program having a method are received. The method has one or more return statements, and a number of basic blocks. The method is normalized so that each return statement of the target method relating to the illegal pattern returns a constant Boolean value. A first path condition and a second path condition for one or more corresponding paths is determined such that one or more corresponding basic blocks return a constant Boolean value of true for the first path condition and a constant Boolean value of false for the second path condition. An unsatisfiability of each path condition is determined using a monadic second-order logic (M2L) technique. Where the unsatisfiability of either path condition is false, the method is reported as not being a validator. Where the unsatisfiability of either path condition is true, the method is reported as being a validator.
摘要翻译：接收到具有方法的非法模式和计算机程序。该方法具有一个或多个返回语句和一些基本块。该方法被归一化，使得与非法模式相关的目标方法的每个返回语句返回一个常量布尔值。确定用于一个或多个对应路径的第一路径条件和第二路径条件，使得一个或多个对应的基本块返回针对第一路径条件的常数布尔值为true，对于第二路径条件返回常量布尔值为假。使用一元二阶逻辑（M2L）技术确定每个路径条件的不满足性。如果任一路径条件的不满足性为假，则将该方法报告为不是验证器。如果任一路径条件的不满足性为真，则将该方法报告为验证器。

6. 发明授权

US08296722B2 Crawling of object model using transformation graph 失效
标题翻译：使用变换图来爬行对象模型
公开(公告)号：US08296722B2
公开(公告)日：2012-10-23
申请号：US12246065
申请日：2008-10-06
申请人： Sachiko Yoshihama , Shinya Kawanaka , Takaaki Tateishi , Ory Segal , Adi Sharabani , Marco Pistoia , Guy Podjarny
发明人： Sachiko Yoshihama , Shinya Kawanaka , Takaaki Tateishi , Ory Segal , Adi Sharabani , Marco Pistoia , Guy Podjarny
IPC分类号： G06F9/44
CPC分类号： G06F8/10
摘要： A transformation tree for an object model (OM) is defined. The transformation tree has nodes interconnected by edges, where each node is connected to at most one other tree node. Each node corresponds to a state of the OM; each edge corresponds to an event causing the OM to transition from the state of one node to the state of another node. A transformation graph for the OM is constructed by simulating the transformation tree. The transformation graph has nodes interconnected by edges, and is a directed graph in which each node is connected to one or more other nodes. Each node corresponds to a state of the OM; each edge corresponds to an event causing the OM to transition from the state of one node to the state of another node. Crawling-oriented actions are performed in relation to the OM by being performed in relation to the transformation graph.
摘要翻译：定义了对象模型（OM）的转换树。转换树具有通过边缘互连的节点，其中每个节点连接到最多一个其他树节点。每个节点都对应于OM的状态; 每个边缘对应于导致OM从一个节点的状态转变到另一个节点的状态的事件。通过模拟转换树构建OM的变换图。转换图具有通过边缘互连的节点，并且是有向图，其中每个节点连接到一个或多个其他节点。每个节点对应于OM的状态; 每个边缘对应于导致OM从一个节点的状态转变到另一个节点的状态的事件。通过相对于变换图执行针对OM执行针对爬行的动作。

7. 发明申请

US20120159619A1 Formal Analysis of the Quality and Conformance of Information Flow Downgraders 有权
标题翻译：信息流降级的质量和一致性的正式分析
公开(公告)号：US20120159619A1
公开(公告)日：2012-06-21
申请号：US12968646
申请日：2010-12-15
申请人： Ryan J. Berg , Marco Pistoia , Takaaki Tateishi , Stephen D. Teilhet , Omer Tripp
发明人： Ryan J. Berg , Marco Pistoia , Takaaki Tateishi , Stephen D. Teilhet , Omer Tripp
IPC分类号： G06F21/00 , G06F9/44
CPC分类号： G06F21/50 , G06F21/577
摘要： Mechanisms for evaluating downgrader code in application code with regard to one or more security guidelines are provided. Downgrader code in application code is identified, where the downgrader code is a portion of code in the application code that operates on an information flow of the application code to ensure confidentiality of information input to the downgrader code, in the output of the downgrader code. Processes of the downgrader code are evaluated against security guidelines to determine if the processes violate the security guidelines. A notification is generated in response to the evaluation indicating that the processes of the downgrader code violate the security guidelines. The notification is output to a computing device for consideration.
摘要翻译：提供了关于一个或多个安全指南的应用程序代码评估降级代码的机制。识别应用代码中的降级代码，其中降级代码是应用代码中的代码的一部分，其在应用代码的信息流上操作，以确保降级代码的输出中输入降级代码的信息的机密性。根据安全准则评估降级代码的过程，以确定进程是否违反安全性准则。产生响应于评估的通知，指示降级代码的处理违反安全准则。该通知被输出到计算设备以供考虑。

8. 发明申请

US20120023486A1 Verification of Information-Flow Downgraders 失效
标题翻译：信息流降级的验证
公开(公告)号：US20120023486A1
公开(公告)日：2012-01-26
申请号：US12843308
申请日：2010-07-26
申请人： Yinnon A. Haviv , Roee Hay , Marco Pistoia , Adi Sharabani , Takaaki Tateishi , Omer Tripp , Omri Weisman
发明人： Yinnon A. Haviv , Roee Hay , Marco Pistoia , Adi Sharabani , Takaaki Tateishi , Omer Tripp , Omri Weisman
IPC分类号： G06F9/44
CPC分类号： G06F21/577 , H04L63/105
摘要： A method includes determining grammar for output of an information-flow downgrader in a software program. The software program directs the output of the information-flow downgrader to a sink. The method includes determining whether the grammar of the output conforms to one or more predetermined specifications of the sink. The method includes, in response to a determination the grammar of the output conforms to the one or more predetermined specifications of the sink, determining the information-flow downgrader is verified for the sink, wherein determining grammar, determining whether the grammar, and determining the information-flow downgrader are performed via static analysis of the software program. Apparatus and computer program products are also disclosed. An apparatus includes a user interface providing a result of whether or not output of an information-flow downgrader in the software program conforms to one or more predetermined specifications of a sink in the software program.
摘要翻译：一种方法包括在软件程序中确定信息流降级器的输出的语法。软件程序将信息流降级器的输出引导到宿。该方法包括确定输出的语法是否符合汇的一个或多个预定规范。该方法包括响应于确定，输出的语法符合信宿的一个或多个预定规范，确定信宿流降级器对于汇点进行验证，其中确定语法，确定语法，并确定信息流降级器通过软件程序的静态分析来执行。还公开了装置和计算机程序产品。一种装置，包括提供软件程序中的信息流下载器的输出是否符合软件程序中的接收器的一个或多个预定规格的结果的用户界面。

9. 发明授权

US09092723B2 Using a heuristically-generated policy to dynamically select string analysis algorithms for client queries 有权
标题翻译：使用启发式生成的策略来动态选择客户端查询的字符串分析算法
公开(公告)号：US09092723B2
公开(公告)日：2015-07-28
申请号：US13412121
申请日：2012-03-05
申请人： Marco Pistoia , Takaaki Tateishi , Omer Tripp
发明人： Marco Pistoia , Takaaki Tateishi , Omer Tripp
IPC分类号： G06N5/00
CPC分类号： G06N5/00
摘要： A method for dynamically selecting string analysis algorithms can begin with the training of the dynamic string analysis handler of a string analysis module to effectively handle a subset of string queries having contextual metadata received from a client application in an instructional environment. The effectiveness of the training module can be based upon feedback from the client application. Upon completion of the training, a string analysis algorithm selection policy can be synthesized. The string analysis algorithm selection policy can correlate a context of a string query in the subset to the usage of a string analysis algorithm. When in the operational environment, the dynamic string analysis handler can dynamically handle string queries having contextual metadata received from the client application in accordance with the string analysis algorithm selection policy. The string analysis algorithm to be used for a string query can be dynamically and independently determined.
摘要翻译：用于动态选择字符串分析算法的方法可以开始于字符串分析模块的动态字符串分析处理程序的训练，以有效地处理在教学环境中从客户端应用程序接收的具有上下文元数据的字符串查询的子集。培训模块的有效性可以基于客户端应用程序的反馈。完成培训后，可以合成字符串分析算法选择策略。字符串分析算法选择策略可以将子集中的字符串查询的上下文与字符串分析算法的使用相关联。在操作环境中，动态字符串分析处理程序可以根据字符串分析算法选择策略来动态地处理具有从客户端应用程序接收的上下文元数据的字符串查询。用于字符串查询的字符串分析算法可以动态和独立地确定。

10. 发明授权

US08650546B2 Static analysis based on observed string values during execution of a computer-based software application 失效
标题翻译：在基于计算机的软件应用程序执行期间，基于观察到的字符串值的静态分析
公开(公告)号：US08650546B2
公开(公告)日：2014-02-11
申请号：US13173012
申请日：2011-06-30
申请人： Marco Pistoia , Takaaki Tateishi , Omer Tripp
发明人： Marco Pistoia , Takaaki Tateishi , Omer Tripp
IPC分类号： G06F9/44
CPC分类号： G06F11/3608
摘要： Improving static analysis precision by recording a value pointed to by a string variable within the computer-based software application during the execution of a computer-based software application, modeling an invariant based on the recorded value, where the invariant represents at least one possible value pointed to by the string variable, performing a first static analysis of the computer-based software application to determine whether the invariant is valid with respect to the computer-based software application, and seeding a second static analysis of the computer-based software application with the invariant if the invariant is valid with respect to the computer-based software application.
摘要翻译：通过在执行基于计算机的软件应用程序期间记录基于计算机的软件应用程序中由字符串变量指向的值来提高静态分析精度，基于记录的值对不变量建模，其中不变量表示至少一个可能的值由字符串变量指向，对基于计算机的软件应用进行第一静态分析，以确定相对于基于计算机的软件应用是否不变量是否有效;以及将基于计算机的软件应用的第二静态分析与如果不变式对于基于计算机的软件应用程序是有效的则不变量。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式