专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US5953534A Environment manipulation for executing modified executable and dynamically-loaded library files 失效
标题翻译：用于执行修改的可执行和动态加载的库文件的环境操作
公开(公告)号：US5953534A
公开(公告)日：1999-09-14
申请号：US996838
申请日：1997-12-23
申请人： Theodore H. Romer , Alastair Wolman , Dennis Chua Lee , Geoffrey Michael Voelker , Brian N. Bershad , John Bradley Chen , Henry M. Levy , Wayne Anthony Wong
发明人： Theodore H. Romer , Alastair Wolman , Dennis Chua Lee , Geoffrey Michael Voelker , Brian N. Bershad , John Bradley Chen , Henry M. Levy , Wayne Anthony Wong
IPC分类号： G06F11/34 , G06F9/445
CPC分类号： G06F11/3466
摘要： A method and procedure for modifying modules comprising a binary executable software program in such a way that, despite the transformations performed and the creation of new versions of the modules, the transformed program appears (to that program, including all of its components) as if it is running in the identical environment as the original program. The environment includes environment variables, the name of the program, the names of all of the dynamically loaded library (DLL) files that the program references, the directory in which the program resides, and the current directory at the time the program started execution. When the program has been transformed, e.g., for the purposes of monitoring or measurement, the environment also includes the effective addresses of data and instruction references made by the program. By employing the present invention, a modified software program will have the same behavior as the original unmodified program from which it is derived, even though it and many of its environment characteristics have been changed.
摘要翻译：一种用于修改包括二进制可执行软件程序的模块的方法和过程，使得尽管执行了转换和创建了新版本的模块，但出现了转换的程序（该程序包括其所有组件），如同它与原始程序在相同的环境中运行。环境包括环境变量，程序名称，程序引用的所有动态加载库（DLL）文件的名称，程序所在的目录以及程序开始执行时的当前目录。当程序已经变换时，例如为了监视或测量的目的，环境还包括由程序作出的数据和指令引用的有效地址。通过采用本发明，修改的软件程序将具有与从其导出的原始未修改程序相同的行为，尽管它和许多其环境特性已被改变。

2. 发明授权

US6014513A Discovering code and data in a binary executable program 失效
标题翻译：在二进制可执行程序中发现代码和数据
公开(公告)号：US6014513A
公开(公告)日：2000-01-11
申请号：US996839
申请日：1997-12-23
申请人： Geoffrey Michael Voelker , Theodore H. Romer , Alastair Wolman , Dennis Chua Lee , Brian N. Bershad , John Bradley Chen , Henry M. Levy , Wayne Anthony Wong
发明人： Geoffrey Michael Voelker , Theodore H. Romer , Alastair Wolman , Dennis Chua Lee , Brian N. Bershad , John Bradley Chen , Henry M. Levy , Wayne Anthony Wong
IPC分类号： G06F9/44 , G06F9/445
CPC分类号： G06F8/75
摘要： A computer software tool used for automatically identifying code portions and data portions of a binary executable software program in which the code portions include machine instructions that are of arbitrary length. Software products are typically distributed as binary, executable files, which comprise a string of binary values. In general, an executable file has no structure or meaning, except as determined by its behavior when dynamically executed, one instruction at a time, by a digital computer. The software tool determines a set of addresses for any known code and data portions. The tool is then used to disassemble machine instructions, beginning at a starting address for each known code portion, to identify the target addresses of other code portions and other data portions. Other sections of the binary executable software program that could be either code or data are then analyzed to identify additionAL code and data portions. As new portions are identified, the steps are repeated, until no further code or data portions are identifiable. The binary executable software program may include a plurality of executable modules. The entry addresses for each executable module and any addresses for code portions and data portions referenced and identified by any debug address, any export address, and any relocation address is added to the set of addresses. The binary executable software program is then executed to dynamically identify other executable modules so that the set of addresses can be further extended.
摘要翻译：一种用于自动识别二进制可执行软件程序的代码部分和数据部分的计算机软件工具，其中代码部分包括任意长度的机器指令。软件产品通常以二进制可执行文件的形式分发，其中包含一串二进制值。通常，一个可执行文件没有结构或意义，除非是由数字计算机一次动态执行，一次一个指令确定的。软件工具为任何已知的代码和数据部分确定一组地址。然后，该工具用于从每个已知代码部分的起始地址开始分解机器指令，以识别其他代码部分和其他数据部分的目标地址。然后分析可以是代码或数据的二进制可执行软件程序的其他部分，以识别附加代码和数据部分。当识别出新的部分时，重复这些步骤，直到没有进一步的代码或数据部分被识别为止。二进制可执行软件程序可以包括多个可执行模块。每个可执行模块的入口地址和由任何调试地址，任何导出地址和任何重定位地址引用和标识的代码部分和数据部分的任何地址被添加到地址集合。然后执行二进制可执行软件程序以动态地识别其他可执行模块，使得该组地址可以进一步扩展。

3. 发明授权

US08615605B2 Automatic identification of travel and non-travel network addresses 有权
标题翻译：自动识别旅行和非旅行网络地址
公开(公告)号：US08615605B2
公开(公告)日：2013-12-24
申请号：US12909839
申请日：2010-10-22
申请人： Fang Yu , Yinglian Xie , Martin Abadi , Stefan Roberts Savage , Geoffrey Michael Voelker , Andreas Pitsillidis
发明人： Fang Yu , Yinglian Xie , Martin Abadi , Stefan Roberts Savage , Geoffrey Michael Voelker , Andreas Pitsillidis
IPC分类号： G06F15/16
CPC分类号： H04L67/18 , H04L61/15 , H04L61/609 , H04L63/1425
摘要： A system to automatically classify types of IP addresses associated with a user. Information, such as user names, machine information, IP address, etc., may be obtained from logs. For each user or host in the logs, home IP addresses are identified from IP addresses where the user or host shows a predetermined level of activity. Travel IP addresses are identified, which are IP addresses at locations greater than a predetermined distance from the home IP addresses, as determined from geolocation data. A pattern analysis may be performed to determine which of the home IP addresses are work IP addresses associated with the user or host. The system may thus provide a classification of a user's or host's associated IP addresses as being one of travel, home, and work IP addresses. From this classification, mobility patterns may be derived, as well as applications to enhance security, advertising, search and network management.
摘要翻译：用于自动分类与用户相关联的IP地址类型的系统。可以从日志中获取诸如用户名，机器信息，IP地址等的信息。对于日志中的每个用户或主机，归属IP地址从用户或主机显示预定级别的活动的IP地址识别。识别出旅行IP地址，这些IP地址在距离家庭IP地址大于预定距离的位置处，这是根据地理定位数据确定的。可以执行模式分析以确定哪个归属IP地址是与用户或主机相关联的工作IP地址。因此，系统可以将用户或主机的相关IP地址的分类提供为旅行，家庭和工作IP地址之一。从这种分类可以推导出移动性模式，以及增强安全性，广告，搜索和网络管理的应用。

4. 发明申请

US20120102169A1 AUTOMATIC IDENTIFICATION OF TRAVEL AND NON-TRAVEL NETWORK ADDRESSES 有权
标题翻译：自动识别旅行和非旅行网络地址
公开(公告)号：US20120102169A1
公开(公告)日：2012-04-26
申请号：US12909839
申请日：2010-10-22
申请人： Fang Yu , Yinglian Xie , Martin Abadi , Stefan Roberts Savage , Geoffrey Michael Voelker , Andreas Pitsillidis
发明人： Fang Yu , Yinglian Xie , Martin Abadi , Stefan Roberts Savage , Geoffrey Michael Voelker , Andreas Pitsillidis
IPC分类号： G06F15/173
CPC分类号： H04L67/18 , H04L61/15 , H04L61/609 , H04L63/1425
摘要： A system to automatically classify types of IP addresses associated with a user. Information, such as user names, machine information, IP address, etc., may be obtained from logs. For each user or host in the logs, home IP addresses are identified from IP addresses where the user or host shows a predetermined level of activity. Travel IP addresses are identified, which are IP addresses at locations greater than a predetermined distance from the home IP addresses, as determined from geolocation data. A pattern analysis may be performed to determine which of the home IP addresses are work IP addresses associated with the user or host. The system may thus provide a classification of a user's or host's associated IP addresses as being one of travel, home, and work IP addresses. From this classification, mobility patterns may be derived, as well as applications to enhance security, advertising, search and network management.
摘要翻译：用于自动分类与用户相关联的IP地址类型的系统。可以从日志中获取诸如用户名，机器信息，IP地址等的信息。对于日志中的每个用户或主机，归属IP地址从用户或主机显示预定级别的活动的IP地址识别。识别出旅行IP地址，这些IP地址在距离家庭IP地址大于预定距离的位置处，这是根据地理定位数据确定的。可以执行模式分析以确定哪个归属IP地址是与用户或主机相关联的工作IP地址。因此，系统可以将用户或主机的相关IP地址的分类提供为旅行，家庭和工作IP地址之一。从这种分类可以推导出移动性模式，以及增强安全性，广告，搜索和网络管理的应用。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式