专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08656497B2 Constraint injection system for immunizing software programs against vulnerabilities and attacks 有权
标题翻译：限制注射系统，用于免疫软件程序，防范漏洞和攻击
公开(公告)号：US08656497B2
公开(公告)日：2014-02-18
申请号：US13078470
申请日：2011-04-01
申请人： Saman P. Amarasinghe , Bharath Chandramohan , Charles Renert , Derek L. Bruening , Vladimir Kiriansky , Timothy Garnett , Sandy Wilbourn , Warren Wu
发明人： Saman P. Amarasinghe , Bharath Chandramohan , Charles Renert , Derek L. Bruening , Vladimir Kiriansky , Timothy Garnett , Sandy Wilbourn , Warren Wu
IPC分类号： G06F11/00
CPC分类号： G06F21/53 , G06F21/54 , G06F21/577
摘要： A constraint is inserted into a program to address a vulnerability of the program to attacks. The constraint includes a segment of code that determines when the program has been asked to execute a “corner case” which does not occur in normal operations. The constraint code can access a library of detector and remediator functions to detect various attacks and remediate against them. Optionally, the detector can be employed without the remediator for analysis. The context of the program can be saved and restored if necessary to continue operating after remediation is performed. The constraints can include descriptors, along with machine instructions or byte code, which indicate how the constraints are to be used.
摘要翻译：一个约束被插入到一个程序中，以解决该程序对攻击的脆弱性。约束包括一段代码，用于确定程序何时被要求执行在正常操作中不会发生的“角落”。约束代码可以访问检测器和修复器功能库，以检测各种攻击并对其进行补救。任选地，可以使用检测器而不用补救剂进行分析。如果需要，可以保存和恢复程序的上下文，以便在执行修复后继续运行。约束可以包括描述符，以及机器指令或字节代码，其指示如何使用约束。

2. 发明授权

US08171548B2 0-touch and 1-touch techniques for improving the availability of computer programs under protection without compromising security 有权
标题翻译： 0触摸和1触摸技术，可以在不影响安全性的情况下改善计算机程序的可用性
公开(公告)号：US08171548B2
公开(公告)日：2012-05-01
申请号：US12764622
申请日：2010-04-21
申请人： Srinivas Mantripragada , Timothy Garnett , Derek L. Bruening , Vladimir Kiriansky , Bharath Chandramohan , James Brink , Saman P. Amarasinghe , Sandy Wilbourn
发明人： Srinivas Mantripragada , Timothy Garnett , Derek L. Bruening , Vladimir Kiriansky , Bharath Chandramohan , James Brink , Saman P. Amarasinghe , Sandy Wilbourn
IPC分类号： G06F12/14
CPC分类号： G06F21/51 , G06F21/52 , G06F21/55
摘要： Protected software, such as an application and/or DLL, is monitored by protective software to guard against attacks, while distinguishing spurious, benign events from attacks. In a 1-touch approach, the protected software is monitored in a testing environment to detect spurious, benign events caused by, e.g., incompatibility or interoperability problems. The spurious events can be remediated in different ways, such as by applying a relaxed security policy. In a production mode, or 0-touch mode, when the protected software is subject to attacks, the corresponding remediation can be applied when the spurious events are again detected. Security events which occur in production mode can also be treated as benign when they occur within a specified time window. The applications and/or DLLs can further be classified according to whether they are known to have bad properties, known to be well-behaved, or unknown. Appropriate treatment is provided based on the classification.
摘要翻译：受保护的软件（如应用程序和/或DLL）由保护性软件监控，以防止攻击，同时区分虚假的良性事件和攻击。在一触式方法中，在测试环境中监视受保护的软件，以检测由例如不兼容性或互操作性问题引起的虚假，良性事件。虚假事件可以通过不同的方式进行修复，例如通过应用轻松的安全策略。在生产模式或0触摸模式下，当受保护的软件受到攻击时，当再次检测到杂散事件时，可以应用相应的修复。出现在生产模式下的安全事件也可以在指定的时间窗口内发生时被视为良性的。应用程序和/或DLL可以进一步根据它们是否已知具有不良属性（已知是良好的或未知的）进行分类。基于分类提供适当的治疗。

3. 发明申请

US20060277539A1 CONSTRAINT INJECTION SYSTEM FOR IMMUNIZING SOFTWARE PROGRAMS AGAINST VULNERABILITIES AND ATTACKS 有权
标题翻译：免除易受攻击的软件程序的约束注射系统
公开(公告)号：US20060277539A1
公开(公告)日：2006-12-07
申请号：US11422547
申请日：2006-06-06
申请人： Saman Amarasinghe , Bharath Chandramohan , Charles Renert , Derek Bruening , Vladimir Kiriansky , Tim Garnett , Sandy Wilbourn , Warren Wu
发明人： Saman Amarasinghe , Bharath Chandramohan , Charles Renert , Derek Bruening , Vladimir Kiriansky , Tim Garnett , Sandy Wilbourn , Warren Wu
IPC分类号： G06F9/44
CPC分类号： G06F21/53 , G06F21/54 , G06F21/577
摘要： A constraint is inserted into a program to address a vulnerability of the program to attacks. The constraint includes a segment of code that determines when the program has been asked to execute a “corner case” which does not occur in normal operations. The constraint code can access a library of detector and remediator functions to detect various attacks and remediate against them. Optionally, the detector can be employed without the remediator for analysis. The context of the program can be saved and restored if necessary to continue operating after remediation is performed. The constraints can include descriptors, along with machine instructions or byte code, which indicate how the constraints are to be used.
摘要翻译：一个约束被插入到一个程序中，以解决该程序对攻击的脆弱性。约束包括一段代码，用于确定程序何时被要求执行在正常操作中不会发生的“角落”。约束代码可以访问检测器和修复器功能库，以检测各种攻击并对其进行补救。任选地，可以使用检测器而不用补救剂进行分析。如果需要，可以保存和恢复程序的上下文，以便在执行修复后继续运行。约束可以包括描述符，以及机器指令或字节代码，其指示如何使用约束。

4. 发明授权

US07735136B2 0-touch and 1-touch techniques for improving the availability of computer programs under protection without compromising security 有权
标题翻译： 0触摸和1触摸技术，可以在不影响安全性的情况下改善计算机程序的可用性
公开(公告)号：US07735136B2
公开(公告)日：2010-06-08
申请号：US11406063
申请日：2006-04-18
申请人： Srinivas Mantripragada , Tim Garnett , Derek Bruening , Vladimir Kiriansky , Bharath Chandramohan , James Brink , Saman P. Amarasinghe , Sandy Wilbourn
发明人： Srinivas Mantripragada , Tim Garnett , Derek Bruening , Vladimir Kiriansky , Bharath Chandramohan , James Brink , Saman P. Amarasinghe , Sandy Wilbourn
IPC分类号： G06F12/14
CPC分类号： G06F21/51 , G06F21/52 , G06F21/55
摘要： Protected software, such as an application and/or DLL, is monitored by protective software to guard against attacks, while distinguishing spurious, benign events from attacks. In a 1-touch approach, the protected software is monitored in a testing environment to detect spurious, benign events caused by, e.g., incompatibility or interoperability problems. The spurious events can be remediated in different ways, such as by applying a relaxed security policy. In a production mode, or 0-touch mode, when the protected software is subject to attacks, the corresponding remediation can be applied when the spurious events are again detected. Security events which occur in production mode can also be treated as benign when they occur within a specified time window. The applications and/or DLLs can further be classified according to whether they are known to have bad properties, known to be well-behaved, or unknown. Appropriate treatment is provided based on the classification.
摘要翻译：受保护的软件（如应用程序和/或DLL）由保护性软件监控，以防止攻击，同时区分虚假的良性事件和攻击。在一触式方法中，在测试环境中监视受保护的软件，以检测由例如不兼容性或互操作性问题引起的虚假，良性事件。虚假事件可以通过不同的方式进行修复，例如通过应用轻松的安全策略。在生产模式或0触摸模式下，当受保护的软件受到攻击时，当再次检测到杂散事件时，可以应用相应的修复。出现在生产模式下的安全事件也可以在指定的时间窗口内发生时被视为良性的。应用程序和/或DLL可以进一步根据它们是否已知具有不良属性（已知是良好的或未知的）进行分类。基于分类提供适当的治疗。

5. 发明申请

US20060288420A1 0-Touch and 1-touch techniques for improving the availability of computer programs under protection without compromising security 有权
标题翻译： 0-Touch和1-touch技术，用于在不影响安全性的情况下提高计算机程序的可用性
公开(公告)号：US20060288420A1
公开(公告)日：2006-12-21
申请号：US11406063
申请日：2006-04-18
申请人： Srinivas Mantripragada , Tim Garnett , Derek Bruening , Vladimir Kiriansky , Bharath Chandramohan , James Brink , Saman Amarasinghe , Sandy Wilbourn
发明人： Srinivas Mantripragada , Tim Garnett , Derek Bruening , Vladimir Kiriansky , Bharath Chandramohan , James Brink , Saman Amarasinghe , Sandy Wilbourn
IPC分类号： G06F11/00 , G06F12/14
CPC分类号： G06F21/51 , G06F21/52 , G06F21/55
摘要： Protected software, such as an application and/or DLL, is monitored by protective software to guard against attacks, while distinguishing spurious, benign events from attacks. In a 1-touch approach, the protected software is monitored in a testing environment to detect spurious, benign events caused by, e.g., incompatibility or interoperability problems. The spurious events can be remediated in different ways, such as by applying a relaxed security policy. In a production mode, or 0-touch mode, when the protected software is subject to attacks, the corresponding remediation can be applied when the spurious events are again detected. Security events which occur in production mode can also be treated as benign when they occur within a specified time window. The applications and/or DLLs can further be classified according to whether they are known to have bad properties, known to be well-behaved, or unknown. Appropriate treatment is provided based on the classification.
摘要翻译：受保护的软件（如应用程序和/或DLL）由保护性软件监控，以防止攻击，同时区分虚假的良性事件和攻击。在一触式方法中，在测试环境中监视受保护的软件，以检测由例如不兼容性或互操作性问题引起的假的，良性的事件。虚假事件可以通过不同的方式进行修复，例如通过应用轻松的安全策略。在生产模式或0触摸模式下，当受保护的软件受到攻击时，当再次检测到杂散事件时，可以应用相应的修复。出现在生产模式下的安全事件也可以在指定的时间窗口内发生时被视为良性的。应用程序和/或DLL可以进一步根据它们是否已知具有不良属性（已知是良好的或未知的）进行分类。基于分类提供适当的治疗。

6. 发明申请

US20070067573A1 THREAD-SHARED SOFTWARE CODE CACHES 有权
标题翻译：螺旋式共享软件代码缓存
公开(公告)号：US20070067573A1
公开(公告)日：2007-03-22
申请号：US11533712
申请日：2006-09-20
申请人： Derek Bruening , Vladimir Kiriansky , Tim Garnett , Sanjeev Banerji
发明人： Derek Bruening , Vladimir Kiriansky , Tim Garnett , Sanjeev Banerji
IPC分类号： G06F12/00
CPC分类号： G06F12/0842 , G06F9/3851 , G06F9/526 , G06F12/12
摘要： A runtime system using thread-shared code caches is provided which avoids brute-force all-thread-suspension and monolithic global locks. In one embodiment, medium-grained runtime system synchronization reduces lock contention. The system includes trace building that combines efficient private construction with shared results, in-cache lock-free lookup table access in the presence of entry invalidations, and a delayed deletion algorithm based on timestamps and reference counts. These enable reductions in memory usage and performance overhead.
摘要翻译：提供了使用线程共享代码高速缓存的运行时系统，避免了强力的全线程挂起和单片全局锁。在一个实施例中，中粒度运行时系统同步减少锁争用。该系统包括跟踪构建，其结合了高效的私有构造与共享结果，存在入口无效时的缓存无锁定查找表访问以及基于时间戳和引用计数的延迟删除算法。这些可以减少内存使用和性能开销。

7. 发明授权

US08909928B2 Securing customer virtual machines in a multi-tenant cloud 有权
标题翻译：在多租户云中保护客户虚拟机
公开(公告)号：US08909928B2
公开(公告)日：2014-12-09
申请号：US13045212
申请日：2011-03-10
申请人： Irfan Ahmad , Mukund Gunti , Abhishek Chaturvedi , Vladimir Kiriansky
发明人： Irfan Ahmad , Mukund Gunti , Abhishek Chaturvedi , Vladimir Kiriansky
IPC分类号： H04L9/32 , G06F21/57 , H04L29/06 , H04L9/08
CPC分类号： G06F21/57 , G06F21/51 , G06F21/575 , H04L9/08 , H04L9/0825 , H04L9/083 , H04L9/0897 , H04L63/0428 , H04L63/08
摘要： A trusted virtualization platform protects sensitive customer data during operation of virtual machines in a multi-tenant cloud computing center. The trusted virtualization platform limits administrator access to the data and state of the virtual machines running thereon, reports any changes made thereto, and requires keys provided by the customer or a trusted third party of the customer to perform management operations on the virtual machines. By requiring cloud computing centers to use such trusted virtualization platforms, customers uploading their virtual machines into the cloud computing center can be assured that cloud administrators will not be able to access or tamper with their private data. Furthermore, customers can directly audit all important state or configuration changes for their virtual machines as the trusted virtualization platform can be configured to report all such changes according to a security policy set by the customer.
摘要翻译：可信赖的虚拟化平台在多租户云计算中心的虚拟机运行期间保护敏感的客户数据。受信任的虚拟化平台限制了对其上运行的虚拟机的数据和状态的管理员访问，报告对其的任何更改，并且要求由客户或客户的可信第三方提供的密钥来对虚拟机执行管理操作。通过要求云计算中心使用这种可信赖的虚拟化平台，客户将虚拟机上传到云计算中心可以放心，云管理员将无法访问或篡改其私有数据。此外，客户可以直接审核其虚拟机的所有重要的状态或配置更改，因为可信配置的虚拟化平台可以根据客户设置的安全策略进行报告。

8. 发明申请

US20050010804A1 Secure execution of a computer program using a code cache 有权
标题翻译：使用代码缓存来安全地执行计算机程序
公开(公告)号：US20050010804A1
公开(公告)日：2005-01-13
申请号：US10739499
申请日：2003-12-18
申请人： Derek Bruening , Vladimir Kiriansky , Saman Amarasinghe
发明人： Derek Bruening , Vladimir Kiriansky , Saman Amarasinghe
IPC分类号： G06F21/00 , H04L9/00
CPC分类号： G06F21/566 , G06F21/52 , G06F21/54
摘要： Hijacking of an application is prevented by monitoring control flow transfers during program execution in order to enforce a security policy. At least three basic techniques are used. The first technique, Restricted Code Origins (RCO), can restrict execution privileges on the basis of the origins of instruction executed. This distinction can ensure that malicious code masquerading as data is never executed, thwarting a large class of security attacks. The second technique, Restricted Control Transfers (RCT), can restrict control transfers based on instruction type, source, and target. The third technique, Un-Circumventable Sandboxing (UCS), guarantees that sandboxing checks around any program operation will never be bypassed.
摘要翻译：通过在程序执行期间监视控制流传输来防止应用程序的劫持，以执行安全策略。至少使用三种基本技术。第一种技术限制代码起源（RCO）可以根据执行指令的起源限制执行权限。这种区别可以确保恶意代码伪装成数据永远不会执行，从而阻止了一大堆安全攻击。第二种技术，限制控制传输（RCT）可以根据指令类型，源和目标来限制控制传输。第三种技术，Un-Circumventable Sandboxing（UCS），保证围绕任何程序操作的沙盒检查永远不会被忽略。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式