专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07284274B1 System and method for identifying and eliminating vulnerabilities in computer software applications 有权
标题翻译：用于识别和消除计算机软件应用程序中的漏洞的系统和方法
公开(公告)号：US07284274B1
公开(公告)日：2007-10-16
申请号：US10050764
申请日：2002-01-18
申请人： Thomas J. Walls , Viren Shah , Anup K. Ghosh
发明人： Thomas J. Walls , Viren Shah , Anup K. Ghosh
IPC分类号： G06F15/18
CPC分类号： G06F21/577 , G06F8/70 , G06F9/4486
摘要： A system and method for certifying software for essential and security-critical systems. The system and method provide a methodology and corresponding analysis engines increase the level of confidence that common vulnerabilities are not present in a particular application. A pipeline system consisting of independent modules which involve increasingly complex analysis is disclosed. The pipeline approach allows the user to reduce computation time by focusing resources on only those code segments which were not eliminated previously in the pipeline.
摘要翻译：用于认证基本和安全关键系统的软件的系统和方法。系统和方法提供了一种方法，相应的分析引擎增加了特定应用程序中不存在常见漏洞的置信度。公开了一种由独立模块组成的管道系统，涉及越来越复杂的分析。管道方法允许用户通过将资源仅聚焦在之前未被排除的那些代码段来缩短计算时间。

2. 发明申请

US20120297057A1 Hardware-Assisted Integrity Monitor 有权
标题翻译：硬件辅助完整性监视器
公开(公告)号：US20120297057A1
公开(公告)日：2012-11-22
申请号：US13296312
申请日：2011-11-15
申请人： Anup K. Ghosh , Kun Sun , Jiang Wang , Angelos Stavrou
发明人： Anup K. Ghosh , Kun Sun , Jiang Wang , Angelos Stavrou
IPC分类号： G06F15/173
CPC分类号： H04L63/1441 , G06F9/45558 , G06F21/575 , G06F2009/45587 , G06F2221/2105
摘要： A hardware-assisted integrity monitor may include one or more target machines and/or monitor machines. A target machine may include one or more processors, which may include one or more system management modes (SMM). A SMM may include one or more register checking modules, which may be configured to determine one or more current CPU register states. A SMM may include one or more acquiring modules, which may be configured to determine one or more current memory states. A SMM may include one or more network modules, which may be configured to direct one or more communications, for example of one or more current CPU register states and/or current memory states, to a monitor machine. A monitor machine may include one or more network modules and/or analysis modules. An analysis module may be configured to determine memory state differences and/or determine CPU register states differences.
摘要翻译：硬件辅助完整性监视器可以包括一个或多个目标机器和/或监视器机器。目标机器可以包括一个或多个处理器，其可以包括一个或多个系统管理模式（SMM）。 SMM可以包括一个或多个寄存器检查模块，其可以被配置为确定一个或多个当前CPU寄存器状态。 SMM可以包括一个或多个获取模块，其可以被配置为确定一个或多个当前存储器状态。 SMM可以包括一个或多个网络模块，其可以被配置为将一个或多个通信（例如一个或多个当前CPU寄存器状态和/或当前存储器状态）引导到监视器机器。监视器机器可以包括一个或多个网络模块和/或分析模块。分析模块可以被配置为确定存储器状态差异和/或确定CPU寄存器状态差异。

3. 发明申请

US20140289563A1 AUTOMATIC CORRECTION OF APPLICATION BASED ON RUNTIME BEHAVIOR 有权
标题翻译：基于运行行为的自动校正
公开(公告)号：US20140289563A1
公开(公告)日：2014-09-25
申请号：US13848104
申请日：2013-03-21
申请人： Anup K. Ghosh
发明人： Anup K. Ghosh
IPC分类号： G06F11/36
CPC分类号： G06F11/3688 , G06F8/70 , G06F11/0706 , G06F11/0793 , G06Q10/00
摘要： A method and associated system for automatically correcting an application based on runtime behavior of the application. An incident indicates a performance of the application in which a problem object produces an outcome that had not been expected by a user or by a ticketing tool. An incident flow for the problem object is automatically analyzed. Actual run of the application renders a forward data flow and at least one backward data flow is simulated from an expected outcome of the problem object. The forward data flow and the backward data flow(s) are compared to create a candidate fault list for the problem object. A technical specification to correct the candidate fault list and a solution to replace the application are subsequently devised.
摘要翻译：一种基于应用程序的运行时行为自动校正应用程序的方法和关联系统。事件表示应用程序的性能，其中问题对象产生用户或票务工具未预期的结果。自动分析问题对象的事件流。应用程序的实际运行呈现转发数据流，并且从问题对象的预期结果模拟至少一个后向数据流。比较正向数据流和反向数据流以创建问题对象的候选故障列表。随后设计了用于校正候选故障列表的技术规范和替换应用的解决方案。

4. 发明授权

US08448139B2 Automatic correction of application based on runtime behavior 失效
标题翻译：基于运行时行为自动更正应用程序
公开(公告)号：US08448139B2
公开(公告)日：2013-05-21
申请号：US12573421
申请日：2009-10-05
申请人： Anup K. Ghosh
发明人： Anup K. Ghosh
IPC分类号： G06F9/44
CPC分类号： G06F11/3636
摘要： A system and associated method for automatically correcting an application based on runtime behavior of the application. An incident indicates a performance of the application in which a problem object produces an outcome that had not been expected by a user or by a ticketing tool. An incident flow for the problem object is automatically analyzed. Actual run of the application renders a forward data flow and at least one backward data flow is simulated from an expected outcome of the problem object. The forward data flow and the backward data flow(s) are compared to create a candidate fault list for the problem object. A technical specification to correct the candidate fault list and a solution to replace the application are subsequently devised.
摘要翻译：一种基于应用程序的运行时行为自动校正应用程序的系统和相关方法。事件表示应用程序的性能，其中问题对象产生用户或票务工具未预期的结果。自动分析问题对象的事件流。应用程序的实际运行呈现转发数据流，并且从问题对象的预期结果模拟至少一个后向数据流。比较正向数据流和反向数据流以创建问题对象的候选故障列表。随后设计了用于校正候选故障列表的技术规范和替换应用的解决方案。

5. 发明申请

US20090044265A1 Attack Resistant Continuous Network Service Trustworthiness Controller 有权
标题翻译：防攻击连续网络服务可信赖控制器
公开(公告)号：US20090044265A1
公开(公告)日：2009-02-12
申请号：US12059454
申请日：2008-03-31
申请人： Anup K. Ghosh , Yih Huang , Arun Sood
发明人： Anup K. Ghosh , Yih Huang , Arun Sood
IPC分类号： G06F21/00 , G06F15/173
CPC分类号： G06F21/552 , H04L63/0227 , H04L63/1416 , H04L2463/141 , H04L2463/144
摘要： An attack resistant continuous network service trustworthiness controller comprising: state estimation module(s), response selection module(s), actuation module(s), and client dispatcher communication module(s) for maintaining the availability and integrity of online server(s). The state estimation module(s) are configured to generate state estimate(s) for online server(s) using behavior data obtained using sensor module(s). The response selection module(s) are configured to determine corrective action(s) to maintain the availability and integrity of online server(s) when state estimate(s) indicate that the integrity of an online server(s) is compromised. The actuation module(s) are configured to activate actuator(s) based upon the corrective action(s). Client dispatcher communication module(s) are configured to communicate online server availability information to a client dispatcher.
摘要翻译：一种抗攻击连续网络服务可信赖性控制器，包括：状态估计模块，响应选择模块，致动模块和用于维护在线服务器的可用性和完整性的客户端调度员通信模块，。状态估计模块被配置为使用使用传感器模块获得的行为数据来生成在线服务器的状态估计。响应选择模块被配置为当状态估计指示在线服务器的完整性受到损害时，确定维护在线服务器的可用性和完整性的校正动作。致动模块被配置成基于校正动作激活致动器。客户机调度员通信模块被配置为将在线服务器可用性信息传送到客户端调度程序。

6. 发明授权

US08572735B2 Attack resistant continuous network service trustworthiness controller 有权
标题翻译：防攻击连续网络服务可信赖控制器
公开(公告)号：US08572735B2
公开(公告)日：2013-10-29
申请号：US12059454
申请日：2008-03-31
申请人： Anup K. Ghosh , Yih Huang , Arun Sood
发明人： Anup K. Ghosh , Yih Huang , Arun Sood
IPC分类号： G06F11/00 , G06F12/16 , G08B23/00
CPC分类号： G06F21/552 , H04L63/0227 , H04L63/1416 , H04L2463/141 , H04L2463/144
摘要： An attack resistant continuous network service trustworthiness controller comprising: state estimation module(s), response selection module(s), actuation module(s), and client dispatcher communication module(s) for maintaining the availability and integrity of online server(s). The state estimation module(s) are configured to generate state estimate(s) for online server(s) using behavior data obtained using sensor module(s). The response selection module(s) are configured to determine corrective action(s) to maintain the availability and integrity of online server(s) when state estimate(s) indicate that the integrity of an online server(s) is compromised. The actuation module(s) are configured to activate actuator(s) based upon the corrective action(s). Client dispatcher communication module(s) are configured to communicate online server availability information to a client dispatcher.
摘要翻译：一种抗攻击连续网络服务可信赖性控制器，包括：状态估计模块，响应选择模块，致动模块和用于维护在线服务器的可用性和完整性的客户端调度员通信模块，。状态估计模块被配置为使用使用传感器模块获得的行为数据来生成在线服务器的状态估计。响应选择模块被配置为当状态估计指示在线服务器的完整性受到损害时，确定维护在线服务器的可用性和完整性的校正动作。致动模块被配置成基于校正动作激活致动器。客户机调度员通信模块被配置为将在线服务器可用性信息传送到客户端调度程序。

7. 发明申请

US20120297177A1 Hardware Assisted Operating System Switch 审中-公开
标题翻译：硬件辅助操作系统开关
公开(公告)号：US20120297177A1
公开(公告)日：2012-11-22
申请号：US13296303
申请日：2011-11-15
申请人： Anup K. Ghosh , Kun Sun , Jiang Wang , Angelos Stavrou
发明人： Anup K. Ghosh , Kun Sun , Jiang Wang , Angelos Stavrou
IPC分类号： G06F15/177
CPC分类号： G06F21/575 , G06F21/53
摘要： An interoperable firmware memory containing a Basic Input Output System (BIOS) and a trusted platform module (TPSM). The BIOS includes CPU System Management Mode (SMM) firmware configured as read-only at boot. The SMM firmware configured to control switching subsequent to boot between at least: a first memory and second isolated memory; and a first and second isolated non-volatile storage device. The first memory including a first operating system and the second memory including a second operating system. The first non-volatile storage device configured to be used by the first operating system and the second non-volatile storage device configured to be used by the second operating system. The trusted platform module (TPSM) configured to check the integrity of the CPU system Management Mode (SMM) during the boot process.
摘要翻译：包含基本输入输出系统（BIOS）和信任平台模块（TPSM）的可互操作的固件存储器。 BIOS包括在启动时配置为只读的CPU系统管理模式（SMM）固件。所述SMM固件被配置为在至少第一存储器和第二隔离存储器之间控制在引导之后的切换; 以及第一和第二隔离的非易失性存储装置。所述第一存储器包括第一操作系统，所述第二存储器包括第二操作系统。所述第一非易失性存储设备被配置为由所述第一操作系统和所述第二非易失性存储设备使用，所述第二非易失性存储设备被配置为被所述第二操作系统使用可信平台模块（TPSM）被配置为在引导过程中检查CPU系统管理模式（SMM）的完整性。

8. 发明申请

US20130103682A1 COMPUTER-IMPLEMENTED INFORMATION REUSE 有权
标题翻译：计算机实现的信息重用
公开(公告)号：US20130103682A1
公开(公告)日：2013-04-25
申请号：US13277307
申请日：2011-10-20
申请人： Anup K. Ghosh , Sugata Ghosal , Nandakishore Kambhatla , Rose C. Kanjirathinkal , Asidhara Lahiri , Debapriyo Majumdar , Shajith I. Mohamed , Karthik Visweswariah
发明人： Anup K. Ghosh , Sugata Ghosal , Nandakishore Kambhatla , Rose C. Kanjirathinkal , Asidhara Lahiri , Debapriyo Majumdar , Shajith I. Mohamed , Karthik Visweswariah
IPC分类号： G06F17/30
CPC分类号： G06F17/30693 , G06F11/0781 , G06F17/30303 , G06F17/3053
摘要： Embodiments of the present invention relate to an approach for reusing information/knowledge. Specifically, embodiments of the present invention provide an approach for retrieving previously stored data to satisfy queries (e.g., jobs/tickets) for solutions to problems while maintaining privacy/security of the data as well as ensuring the quality of the results. In a typical embodiment, a query for a solution to a problem is received and details are extracted therefrom. Using the details, a search is performed on a set of data stored in at least one computer storage device. Based on the search, a set of results will be generated and classified into a set of categories. In any event, the quality of each of the set of results will be assessed based on the usefulness of the set of results.
摘要翻译：本发明的实施例涉及一种重用信息/知识的方法。具体地，本发明的实施例提供了一种用于检索先前存储的数据以满足针对问题的解决方案的查询（例如，作业/票证）的方法，同时保持数据的隐私/安全性以及确保结果的质量。在典型的实施例中，接收到对问题的解决方案的查询，并从中提取细节。使用细节，对存储在至少一个计算机存储设备中的一组数据执行搜索。基于搜索，将生成一组结果并将其分类为一组类别。无论如何，将根据一组结果的有用性来评估每组结果的质量。

9. 发明申请

US20090125902A1 ON-DEMAND DISPOSABLE VIRTUAL WORK SYSTEM 有权
标题翻译：需求可行的虚拟工作系统
公开(公告)号：US20090125902A1
公开(公告)日：2009-05-14
申请号：US12037412
申请日：2008-02-26
申请人： Anup K. Ghosh , Sushil Jajodia , Yih Huang , Jiang Wang
发明人： Anup K. Ghosh , Sushil Jajodia , Yih Huang , Jiang Wang
IPC分类号： G06F9/455
CPC分类号： G06F9/45533 , G06F9/45558 , G06F21/53 , G06F2009/45562 , G06F2009/45575
摘要： An on-demand disposable virtual work system that includes: a virtual machine monitor to host virtual machines, a virtual machine pool manager, a host operating system, a host program permissions list, and a request handler module. The virtual machine pool manager manages virtual machine resources. The host operating system interfaces with a user and virtual machines created with an image of a reference operating system. The host program permissions list may be a black list and/or a white list used to indicate allowable programs. The request handler module allows execution of the program if the program is allowable. If the program is not allowable, the host request handler module: denies program execution and urges a virtual machine specified by the virtual machine pool manager to execute the program. The virtual machine is terminated when the program closes.
摘要翻译：一种按需一次性虚拟工作系统，其包括：虚拟机监视器以托管虚拟机，虚拟机池管理器，主机操作系统，主机程序许可列表和请求处理程序模块。虚拟机池管理器管理虚拟机资源。主机操作系统与用户以及使用参考操作系统映像创建的虚拟机进行接口。主机程序许可列表可以是用于指示允许的程序的黑名单和/或白名单。如果程序是允许的，请求处理程序模块允许执行程序。如果程序不允许，主机请求处理程序模块：拒绝程序执行，并且敦促由虚拟机池管理器指定的虚拟机执行该程序。虚拟机在程序关闭时终止。

10. 发明授权

US07085928B1 System and method for defending against malicious software 有权
标题翻译：防范恶意软件的系统和方法
公开(公告)号：US07085928B1
公开(公告)日：2006-08-01
申请号：US09821754
申请日：2001-03-30
申请人： Matthew N. Schmid , John Thomas Bloch , Frank F. Hill , Anup K. Ghosh
发明人： Matthew N. Schmid , John Thomas Bloch , Frank F. Hill , Anup K. Ghosh
IPC分类号： G06F9/00
CPC分类号： G06F21/51 , G06F21/6281 , G06F2221/2109 , G06F2221/2141 , G06F2221/2149
摘要： An execution management utility designed to prevent software from executing without the prior approval of system administrative or other security staff. For example, the present invention can assist corporations by enforcing policies regarding unauthorized, unlicensed, or pirated software, such as, but not limited to, games; entertainment software; and non-standard utilities, such as advertising-enhanced browsers. A Windows NT based system is disclosed in which a kernel module selectively intercepts process creation requests.
摘要翻译：执行管理实用程序旨在防止软件在未经系统管理员或其他安全人员事先批准的情况下执行。例如，本发明可以通过执行关于未授权，未经许可或盗版软件的策略来帮助公司，诸如但不限于游戏; 娱乐软件; 和非标准实用程序，如广告增强浏览器。公开了一种基于Windows NT的系统，其中内核模块有选择地拦截进程创建请求。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式