专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20220207142A1 Zero Dwell Time Process Library and Script Monitoring 有权
公开(公告)号：US20220207142A1
公开(公告)日：2022-06-30
申请号：US17646555
申请日：2021-12-30
申请人： Virsec Systems, Inc.
发明人： Satya V. Gupta
IPC分类号： G06F21/56 , G06F21/52 , G06F21/64
摘要： Embodiments provide improved functionality to monitor processes. One such embodiment is directed to a system that includes a centralized database storing approved file signatures. The system also includes a processor that is configured, in response to a user request to run an executable file, to suspend a process implementing execution of the executable file. In turn, the processor determines a signature of the executable file and compares the determined signature of the executable file to the approved file signatures stored in the centralized database. Then, the processor maintains or stops suspension of the process based on the comparison. In an embodiment, the processor stops suspension if the signatures match and takes a protection action if the signatures do not match.

2. 发明申请

US20220067174A1 Automated Application Vulnerability And Risk Assessment 有权
公开(公告)号：US20220067174A1
公开(公告)日：2022-03-03
申请号：US17460004
申请日：2021-08-27
申请人： Virsec Systems, Inc.
发明人： Satya V. Gupta
IPC分类号： G06F21/57
摘要： Embodiments assess security vulnerability of an application. An embodiment runs one or more static and dynamic analysis tools on the application to generate a static vulnerability report and a dynamic vulnerability report. In turn, code of the application is decompiled to identify code of the application that accepts user input. One or more vulnerabilities of the application are determined using the identified code of the application that accepts user input and a vulnerability report is generated that indicates the one or more vulnerabilities of the application determined using the identified code of the application that accepts user input. A final static vulnerability report and a final dynamic vulnerability report are generated based on the static and dynamic vulnerability reports and the generated vulnerability report indicating the one or more vulnerabilities of the application determined using the identified code of the application that accepts user input.

3. 发明授权

US11599634B1 System and methods for run time detection and correction of memory corruption 有权
公开(公告)号：US11599634B1
公开(公告)日：2023-03-07
申请号：US16260539
申请日：2019-01-29
申请人： Virsec Systems, Inc.
发明人： Satya V. Gupta , Prashant Shenoy
IPC分类号： G06F11/00 , G06F21/56 , G06F11/14 , G06F11/10
摘要： A method or apparatus detects a memory corruption of at least one portion of memory during run-time and corrects the memory corruption of the at least one portion of memory by replacing the at least one portion of memory with a backup of the at least one portion of memory. In this way, memory corruption can be corrected in a timely fashion while minimizing security risks.

4. 发明申请

US20220391506A1 Automated Interpreted Application Control For Workloads 有权
公开(公告)号：US20220391506A1
公开(公告)日：2022-12-08
申请号：US17664009
申请日：2022-05-18
申请人： Virsec Systems, Inc
发明人： Satya V. Gupta
IPC分类号： G06F21/56
摘要： Embodiments provide functionality to protect computing workloads from script-based attacks. Upon receipt, at a workload, of a command to commence execution of code of a script, an embodiment determines whether (i) permissions of a user issuing the command comply with a permissions security standard, (ii) an identifier of an interpreter supporting the script is included in an approved interpreter list, (iii) an identifier of a selected parameter of the interpreter is included in an approved parameter list, and (iv) an identifier of the script is included in an approved list of executables. If all of the aforementioned checks pass, such an embodiment allows execution of the code of the script; otherwise, execution is denied, thereby protecting the workload in an event of a script-based attack.

5. 发明申请

US20220207151A1 Application Aware Software Asset Inventory 有权
公开(公告)号：US20220207151A1
公开(公告)日：2022-06-30
申请号：US17646622
申请日：2021-12-30
申请人： Virsec Systems, Inc.
发明人： Satya V. Gupta
IPC分类号： G06F21/57
摘要： Embodiments create application-aware software asset inventories for software assets deployed upon computer networks associated with organizations. An example embodiment extracts configuration information pertaining to an application installed on a workload deployed upon a network. In turn, an application topology file is constructed from the extracted configuration information. The constructed application topology file serves as an application-aware software asset inventory wherein information pertaining to identities, locations, and configurations of such software assets is organized and stored.

6. 发明授权

US11146572B2 Automated runtime detection of malware 有权
公开(公告)号：US11146572B2
公开(公告)日：2021-10-12
申请号：US16040021
申请日：2018-07-19
申请人： Virsec Systems, Inc.
发明人： Satya V. Gupta , Raymond F. DeMeo
IPC分类号： H04L29/06 , G06F21/54 , G06F21/56
摘要： One example method and correspond apparatus extracts a model of a computer application during load time and stores the model of the computer application in a database. This example method and corresponding apparatus also inserts instructions into the computer application to collect data at runtime. This example method and corresponding apparatus then analyzes the data collected at runtime against the stored model of the computer application to detect one or more security events and tracks the one or more security events using a state machine.

7. 发明申请

US20180324195A1 Automated Runtime Detection Of Malware 审中-公开
公开(公告)号：US20180324195A1
公开(公告)日：2018-11-08
申请号：US16040021
申请日：2018-07-19
申请人： Virsec Systems, Inc.
发明人： Satya V. Gupta , Raymond F. DeMeo
IPC分类号： H04L29/06 , G06F21/54 , G06F21/56
CPC分类号： H04L63/1416 , G06F21/54 , G06F21/566 , H04L63/145
摘要： One example method and correspond apparatus extracts a model of a computer application during load time and stores the model of the computer application in a database. This example method and corresponding apparatus also inserts instructions into the computer application to collect data at runtime. This example method and corresponding apparatus then analyzes the data collected at runtime against the stored model of the computer application to detect one or more security events and tracks the one or more security events using a state machine.

8. 发明授权

US11907378B2 Automated application vulnerability and risk assessment 有权
公开(公告)号：US11907378B2
公开(公告)日：2024-02-20
申请号：US17460004
申请日：2021-08-27
申请人： Virsec Systems, Inc.
发明人： Satya V. Gupta
IPC分类号： G06F21/57
CPC分类号： G06F21/577 , G06F2221/033
摘要： Embodiments assess security vulnerability of an application. An embodiment runs one or more static and dynamic analysis tools on the application to generate a static vulnerability report and a dynamic vulnerability report. In turn, code of the application is decompiled to identify code of the application that accepts user input. One or more vulnerabilities of the application are determined using the identified code of the application that accepts user input and a vulnerability report is generated that indicates the one or more vulnerabilities of the application determined using the identified code of the application that accepts user input. A final static vulnerability report and a final dynamic vulnerability report are generated based on the static and dynamic vulnerability reports and the generated vulnerability report indicating the one or more vulnerabilities of the application determined using the identified code of the application that accepts user input.

9. 发明授权

US11870811B2 Trusted execution security policy platform 有权
公开(公告)号：US11870811B2
公开(公告)日：2024-01-09
申请号：US16981219
申请日：2019-03-26
申请人： Virsec Systems, Inc.
发明人： Satya V. Gupta , Piyush Gupta
IPC分类号： H04L9/40
CPC分类号： H04L63/20
摘要： Embodiments are directed to systems that attempt to establish trust in relation to operations on a customer endpoint of a computer network. The systems monitor, in real-time, operations to file systems, registries, application processes and threads, and OS kernels at the customer endpoint. The systems maintain compute components affected by the operation in a quarantine state. The systems then attempt to establish trust in the affected compute components (e.g., by applying rule-based policies). The systems remove the affected compute components from the quarantine state, if trust of the one or more affected compute components is established. The systems execute callback routines to mitigate results of the operation, if trust of the affected compute components is not established. The executed callback routines may terminate one or more processes associated with the operation, move the affected compute components to a quarantine area, restore a valid copy of the affected compute components, load one or more patches to remedy the affected compute components, and reporting the operation and the affected compute components.

10. 发明授权

US08966312B1 System and methods for run time detection and correction of memory corruption 有权
标题翻译：用于运行时检测和校正内存损坏的系统和方法
公开(公告)号：US08966312B1
公开(公告)日：2015-02-24
申请号：US13963365
申请日：2013-08-09
申请人： Virsec Systems, Inc.
发明人： Satya V. Gupta , Prashant Shenoy
IPC分类号： G06F11/00 , G06F11/16
CPC分类号： G06F11/1666 , G06F11/073 , G06F11/0751
摘要： A method or apparatus detects a memory corruption of at least one portion of memory during run-time and corrects the memory corruption of the at least one portion of memory by replacing the at least one portion of memory with a backup of the at least one portion of memory. In this way, memory corruption can be corrected in a timely fashion while minimizing security risks.
摘要翻译：一种方法或装置在运行时间期间检测存储器的至少一部分的存储器损坏，并通过用至少一个部分的备份替换存储器的至少一部分来校正存储器的至少一部分的存储器损坏的记忆以这种方式，可以及时纠正内存损坏，同时最大限度地降低安全风险。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式