专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

91. 发明授权

US10242200B1 Static analysis of vulnerabilities in application packages 有权
公开(公告)号：US10242200B1
公开(公告)日：2019-03-26
申请号：US15061880
申请日：2016-03-04
申请人： Tripwire, Inc.
发明人： Craig Young
IPC分类号： G06F21/57 , G06F17/30
摘要： Apparatus and methods are disclosed herein for analyzing computer programs for potential security vulnerabilities. In one computer-implemented embodiment of the disclosed technology, a method includes analyzing a package for an application (e.g., a mobile device application package) by disassembling at least a portion of executable code associated with the application, searching for a pattern associated with a potentially vulnerably function or method, and, if the function or method is defined, then analyzing disassembled code for the function to determine whether a vulnerability is present. In some examples, a number of packages are stored in an application store database and scanned periodically to statically analyze the package for vulnerabilities.

92. 发明授权

US10235236B1 Methods and apparatus for remediation workflow 有权
公开(公告)号：US10235236B1
公开(公告)日：2019-03-19
申请号：US15090114
申请日：2016-04-04
申请人： Tripwire, Inc.
发明人： David Whitlock , Guy Gascoigne-Piggford , Geoff Granum , Mark Petrie
IPC分类号： G06F11/07
摘要： Disclosed herein are methods, systems, and articles associated with remediation workflow. A method may include determining one or more test failures related to a policy test within a computer network, and reviewing the one or more test failures. The method may further include, based upon a result of the reviewing, creating a remediation work order that includes at least one of the one or more test failures. Each test failure within the remediation work order may be approved or denied. For each test failure that is approved for remediation, a remediation process may be executed.

93. 发明授权

US09992230B1 Assessing security control quality and state in an information technology infrastructure 有权
公开(公告)号：US09992230B1
公开(公告)日：2018-06-05
申请号：US14500718
申请日：2014-09-29
申请人： Tripwire, Inc.
发明人： Marsha Haverty , Ted Schuh
IPC分类号： H04L29/06
CPC分类号： H04L63/20 , H04L63/1433
摘要： Disclosed herein are representative embodiments of methods, apparatus, and systems for processing and managing information from one or more security control tools, such as a security configuration management tool, a vulnerability management tool, an event logging tool, or other IT infrastructure security or monitoring tool that is used to monitor, secure, and/or control assets in an IT infrastructure. For example, in some embodiments, user interfaces are disclosed that allow a user to quickly view, filter, and evaluate the degree of security control coverage in selected assets of an enterprise. In further embodiments, user interfaces are disclosed that allow a user to view and evaluate the current security state for selected assets in across a variety of categories and, in some cases, as guided by a two-dimensional vulnerability risk matrix.

94. 发明授权

US09323549B2 Systems and methods for triggering scripts based upon an alert within a virtual infrastructure 有权
标题翻译：基于虚拟基础架构内的警报触发脚本的系统和方法
公开(公告)号：US09323549B2
公开(公告)日：2016-04-26
申请号：US14059189
申请日：2013-10-21
申请人： Tripwire, Inc.
发明人： Andrew Wagner , Brian McFeely , Robert DiFalco
IPC分类号： G06F9/455 , G06F11/30
CPC分类号： G06F9/455 , G06F9/45558 , G06F11/3006 , G06F11/301 , G06F11/3065 , G06F2009/45591
摘要： Embodiments of the present disclosure provide methods and systems for triggering scripts based upon an alert within a virtual infrastructure. Other embodiments may be described and claimed.
摘要翻译：本公开的实施例提供了用于基于虚拟基础设施内的警报来触发脚本的方法和系统。可以描述和要求保护其他实施例。

95. 发明授权

US09209996B2 Data processing environment change management methods and apparatuses 有权
标题翻译：数据处理环境变更管理方法和装置
公开(公告)号：US09209996B2
公开(公告)日：2015-12-08
申请号：US13424152
申请日：2012-03-19
申请人： Robert A. DiFalco
发明人： Robert A. DiFalco
IPC分类号： G06F15/173 , H04L12/66 , G06F9/445 , H04L12/24 , G06F9/44
CPC分类号： H04L12/66 , G06F8/60 , G06F8/70 , H04L41/082
摘要： An apparatus is provided with a change management module adapted to manage making changes to a data processing device of a data processing environment.
摘要翻译：一种装置设置有改变管理模块，其适于管理对数据处理环境的数据处理装置进行改变。

96. 发明授权

US09026646B2 Methods and apparatus for remediating policy test failures, including correlating changes to remediation processes 有权
标题翻译：修复策略测试失败的方法和设备，包括将更改与修复过程相关联
公开(公告)号：US09026646B2
公开(公告)日：2015-05-05
申请号：US13235141
申请日：2011-09-16
申请人： David Whitlock , Guy Gascoigne-Piggford , Geoff Granum , Mark Petrie
发明人： David Whitlock , Guy Gascoigne-Piggford , Geoff Granum , Mark Petrie
IPC分类号： H04L12/26 , G06F15/177 , H04L12/00 , H04L12/24 , G06F11/07 , H04L29/06 , G06F11/30
CPC分类号： H04L12/00 , G06F11/0709 , G06F11/0793 , G06F11/30 , H04L41/0654 , H04L41/0681 , H04L41/0695 , H04L63/1416
摘要： Disclosed herein are methods, systems, and articles associated with correlating detected changes within a computer network with remediation processes performed in response to policy test failures. In embodiments, on determination that a failure of a policy test has occurred within a computer network having a number of nodes, a remediation process may be executed to remediate the failure. Change at a node may be detected. Further, the detected change may be correlated with the execution of the remediation process, and the correlation may be identified.
摘要翻译：这里公开的是与计算机网络中的检测到的变化相关联的方法，系统和文章以及响应于策略测试失败而执行的修复过程。在实施例中，在确定在具有多个节点的计算机网络内已经发生策略测试的故障的情况下，可以执行修复过程以修复故障。可以检测节点处的变化。此外，检测到的变化可以与修复过程的执行相关，并且可以识别相关性。

97. 发明授权

US08874707B1 Network services platform 有权
标题翻译：网络服务平台
公开(公告)号：US08874707B1
公开(公告)日：2014-10-28
申请号：US14140388
申请日：2013-12-24
申请人： Tripwire, Inc.
发明人： Alexander L. Quilter , Oliver Lavery , David J. Meltzer , Timothy D. Keanini
IPC分类号： G06F15/16 , G06F15/173 , G06F15/177 , H04L12/24 , H04L29/12
CPC分类号： H04L63/029 , H04L41/50 , H04L61/2007 , H04L61/2503 , H04L61/2535 , H04L61/2592 , H04L61/6068
摘要： A network services platform provides services to remote enterprise networks. The services platform provides a control module to a computer in the enterprise network. The control module executes on the computer and interacts with the services platform to establish an Internet Protocol (IP) tunnel between the services platform and the computer. The control module also establishes a bridge between the IP tunnel and the enterprise network. The services platform allocates a unique private IP address space to the enterprise network, and translates IP addresses in network communications between enterprise network addresses and corresponding services platform addresses in the allocated unique private address space. The services platform provides network services to the enterprise network via the IP tunnel and bridge.
摘要翻译：网络服务平台为远程企业网络提供服务。服务平台为企业网络中的计算机提供控制模块。控制模块在计算机上执行并与服务平台交互，以在服务平台和计算机之间建立互联网协议（IP）隧道。控制模块还建立IP隧道与企业网络之间的桥梁。服务平台为企业网络分配唯一的私有IP地址空间，并在分配的唯一专用地址空间中的企业网络地址和相应服务平台地址之间的网络通信中翻译IP地址。服务平台通过IP隧道和桥梁为企业网络提供网络服务。

98. 发明授权

US08819491B2 Methods and apparatus for remediation workflow 有权
标题翻译：修复工作流程的方法和装置
公开(公告)号：US08819491B2
公开(公告)日：2014-08-26
申请号：US13235189
申请日：2011-09-16
申请人： David Whitlock , Guy Gascoigne-Piggford , Geoff Granum , Mark Petrie
发明人： David Whitlock , Guy Gascoigne-Piggford , Geoff Granum , Mark Petrie
IPC分类号： G06F11/00
CPC分类号： G06F11/0793 , G06F11/26 , G06Q10/0631
摘要： Disclosed herein are methods, systems, and articles associated with remediation workflow. A method may include determining one or more test failures related to a policy test within a computer network, and reviewing the one or more test failures. The method may further include, based upon a result of the reviewing, creating a remediation work order that includes at least one of the one or more test failures. Each test failure within the remediation work order may be approved or denied. For each test failure that is approved for remediation, a remediation process may be executed.
摘要翻译：本文公开了与修复工作流相关联的方法，系统和文章。方法可以包括确定与计算机网络内的策略测试相关的一个或多个测试故障，以及查看一个或多个测试故障。该方法可以进一步包括基于审查的结果，创建包括一个或多个测试失败中的至少一个的修复工作顺序。修复工作单中的每个测试失败可能被批准或拒绝。对于被批准用于修复的每个测试失败，可以执行修复过程。

99. 发明申请

US20140053145A1 OPERATING SYSTEM PATCHING AND SOFTWARE UPDATE RECONCILIATION 有权
标题翻译：操作系统更新和软件更新重新安装
公开(公告)号：US20140053145A1
公开(公告)日：2014-02-20
申请号：US13631517
申请日：2012-09-28
申请人： TRIPWIRE, INC.
发明人： Andrew C. Steigleder
IPC分类号： G06F9/44
CPC分类号： G06F8/65 , G06F8/61 , G06F8/658 , G06F17/30
摘要： Apparatus and methods are disclosed for implementing software reconciliation frameworks to process changes detected to software installed on computer hosts. According to one embodiment, a method includes receiving change data describing changes to one or more software components stored on a computer-readable storage device, determining installed software on a computer associated with the computer-readable storage device, receiving a manifest comprising a description of file changes associated with a software patch or update for the installed software, and comparing the change data to the manifest. Based on the comparing, if the change data matches the manifest, the changes are promoted, and if the change data does not match the manifest, the changes are marked for further analysis.
摘要翻译：公开了用于实现软件协调框架以处理检测到安装在计算机主机上的软件的变化的装置和方法。根据一个实施例，一种方法包括接收描述对存储在计算机可读存储设备上的一个或多个软件组件的改变的改变数据，确定与计算机可读存储设备相关联的计算机上的已安装软件，接收包含描述与软件补丁相关联的文件更改或已安装软件的更新，以及将更改数据与清单进行比较。根据比较，如果更改数据与清单匹配，则更改将被提升，如果更改数据与清单不匹配，则将更改标记为进一步分析。

100. 发明授权

US08600996B2 Use of inference techniques to facilitate categorization of system change information 有权
标题翻译：使用推理技术来促进系统变更信息的分类
公开(公告)号：US08600996B2
公开(公告)日：2013-12-03
申请号：US12633747
申请日：2009-12-08
申请人： Tom Good , Gene Kim , David Whitlock
发明人： Tom Good , Gene Kim , David Whitlock
IPC分类号： G06F7/00 , G06F17/30
CPC分类号： G06F11/3051 , G06F11/3006 , G06F11/3075 , G06F11/3082
摘要： Methods, systems, and articles for receiving, by a monitor server, change data associated with a change captured on a target host, are described herein. In various embodiments, the target host may have provided the change data in response to detecting the change, and the change data may include one or more rules, settings, and/or parameters. Further, in some embodiments, the monitor server may analyze the change data in order to group the change data into clusters. Once the change data have been classified as clusters, a report may be generated providing classification or categorization and cluster information for the various changes. In various embodiments, the generating may comprise generating a report to the target host and/or to an administrative user.
摘要翻译：本文描述了用于由监视器服务器接收与目标主机上捕获的改变相关联的数据的方法，系统和文章。在各种实施例中，目标主机可以响应于检测到改变而提供改变数据，并且改变数据可以包括一个或多个规则，设置和/或参数。此外，在一些实施例中，监视服务器可以分析改变数据，以便将改变数据分组成簇。一旦将更改数据分类为群集，就可以生成报告，为各种更改提供分类或分类和群集信息。在各种实施例中，生成可以包括向目标主机和/或向管理用户生成报告。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式