会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 1. 发明申请
    • SYSTEM AND METHOD FOR DAY-ZERO AUTHENTICATION OF ACTIVEX CONTROLS
    • 用于ActiveX控件的零点认证的系统和方法
    • WO2013028978A1
    • 2013-02-28
    • PCT/US2012/052282
    • 2012-08-24
    • MCAFEE, INC.KUMAR, PawanGUPTA, RohitBADOLA, Manoj
    • KUMAR, PawanGUPTA, RohitBADOLA, Manoj
    • G06F21/22G06F9/44
    • G06F21/572G06F21/51G06F21/52H04L9/3247H04L63/0823H04W4/50
    • A system and method in one embodiment includes modules for verifying a digital signature of a Microsoft® ActiveX® control, identifying an executable file of the ActiveX control, authorizing the executable file as an updater configured to enable trust propagation, if the digital signature is from an authorized issuer, and installing the ActiveX control. More specific embodiments include hooking an exported function in the executable file and marking a thread calling the exported function as an updater. Hooking the exported function includes patching the executable function so that when the exported function is called during execution of the executable file, a second function is executed before the exported function is executed. Other embodiments include extracting a cabinet file wrapping the ActiveX control, parsing an information file in the cabinet file, and downloading additional components for installing the ActiveX control.
    • 一个实施例中的系统和方法包括用于验证Microsoft ActiveX控件的数字签名的模块,识别ActiveX控件的可执行文件,将可执行文件授权为配置为启用信任传播的更新器,如果数字签名来自 授权发行人,并安装ActiveX控件。 更具体的实施例包括将可导出的功能挂接在可执行文件中,并将一个线程称为导出的函数作为更新程序。 挂接导出的函数包括修补可执行函数,以便在执行可执行文件时调用导出函数时,在执行导出函数之前执行第二个函数。 其他实施例包括提取包装ActiveX控件的机柜文件,解析橱柜文件中的信息文件,以及下载用于安装ActiveX控件的附加组件。