专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

51. 发明申请

US20150379263A1 TECHNOLOGIES FOR PREVENTING HOOK-SKIPPING ATTACKS USING PROCESSOR VIRTUALIZATION FEATURES 有权
标题翻译：使用处理器虚拟化功能防止跳槽攻击的技术
公开(公告)号：US20150379263A1
公开(公告)日：2015-12-31
申请号：US14318215
申请日：2014-06-27
申请人： Harshawardhan Vipat , Manohar R. Castelino , Ravi L. Sahita , Sergio Rodriguez , Vikas Gupta
发明人： Harshawardhan Vipat , Manohar R. Castelino , Ravi L. Sahita , Sergio Rodriguez , Vikas Gupta
IPC分类号： G06F21/56
CPC分类号： G06F21/79 , G06F21/62
摘要： Technologies for monitoring system API calls include a computing device with hardware virtualization support. The computing device establishes a default memory view and a security memory view to define physical memory maps and permissions. The computing device executes an application in the default memory view and executes a default inline hook in response to a call to an API function. The default inline hook switches to the security memory view using hardware support without causing a virtual machine exit. The security inline hook calls a security callback function to validate the API function call in the security memory view. Hook-skipping attacks may be prevented by padding the default inline hook with no-operation instructions, by designating memory pages of the API function as non-executable in the default memory view, or by designating memory pages of the application as non-executable in the security memory view. Other embodiments are described and claimed.
摘要翻译：用于监视系统API调用的技术包括具有硬件虚拟化支持的计算设备。计算设备建立默认内存视图和安全内存视图来定义物理内存映射和权限。计算设备在默认存储器视图中执行应用程序，并响应于对API函数的调用执行默认内联钩子。默认内联挂钩将使用硬件支持切换到安全内存视图，而不会导致虚拟机退出。安全内联钩调用安全回调函数来验证安全内存视图中的API函数调用。通过将默认内存视图中的不可执行的API函数的内存页指定为不可执行的内存页，或者通过将应用程序的内存页指定为不可执行的方式，可以通过使用无操作指令填充默认内联钩来防止跳钩攻击安全内存视图。描述和要求保护其他实施例。

52. 发明申请

US20150242333A1 INCREASING VIRTUAL-MEMORY EFFICIENCIES 有权
标题翻译：增加虚拟内存效率
公开(公告)号：US20150242333A1
公开(公告)日：2015-08-27
申请号：US14709369
申请日：2015-05-11
申请人： Ramesh Thomas , Kuo-Lang Tseng , Ravi L. Sahita , David M. Durham , Madhukar Tallam
发明人： Ramesh Thomas , Kuo-Lang Tseng , Ravi L. Sahita , David M. Durham , Madhukar Tallam
IPC分类号： G06F12/14 , G06F9/455 , G06F11/14 , G06F11/20 , G06F12/10
CPC分类号： G06F12/1458 , G06F9/45533 , G06F9/468 , G06F11/1484 , G06F11/2056 , G06F12/08 , G06F12/1009 , G06F12/1425 , G06F12/145 , G06F12/1483 , G06F2009/45583 , G06F2009/45587 , G06F2201/815 , G06F2201/84 , G06F2212/1052 , G06F2212/657
摘要： Embodiments of techniques and systems for increasing efficiencies in computing systems using virtual memory are described. In embodiments, instructions which are located in two memory pages in a virtual memory system, such that one of the pages does not permit execution of the instructions located therein, are identified and then executed under temporary permissions that permit execution of the identified instructions. In various embodiments, the temporary permissions may come from modified virtual memory page tables, temporary virtual memory page tables which allow for execution, and/or emulators which have root access. In embodiments, per-core virtual memory page tables may be provided to allow two cores of a computer processor to operate in accordance with different memory access permissions. In embodiments, a physical page permission table may be utilized to provide for maintenance and tracking of per-physical-page memory access permissions. Other embodiments may be described and claimed.
摘要翻译：描述了使用虚拟存储器提高计算系统效率的技术和系统的实施例。在实施例中，位于虚拟存储器系统中的两个存储器页面中的指令，使得页面中的一个不允许执行位于其中的指令，并且然后在允许执行所识别的指令的临时许可下执行。在各种实施例中，临时许可可来自修改的虚拟内存页表，允许执行的临时虚拟内存页表，和/或具有根访问的仿真器。在实施例中，可以提供每核心虚拟内存页表以允许计算机处理器的两个核心根据不同的存储器访问许可来操作。在实施例中，物理页面许可表可以用于提供对每个物理页面存储器访问许可的维护和跟踪。可以描述和要求保护其他实施例。

53. 发明申请

US20140283056A1 Linear Address Mapping Protection 有权
标题翻译：线性地址映射保护
公开(公告)号：US20140283056A1
公开(公告)日：2014-09-18
申请号：US13838091
申请日：2013-03-15
申请人： Rekha N. Bachwani , Ravi L. Sahita , David M. Durham
发明人： Rekha N. Bachwani , Ravi L. Sahita , David M. Durham
IPC分类号： G06F21/56
CPC分类号： G06F21/56 , G06F9/45558 , G06F21/554 , G06F21/563 , G06F21/566 , G06F2009/45583 , G06F2009/45587
摘要： Technologies for securing an electronic device include determining addresses of one or more memory pages, injecting for each memory page a portion of identifier data into the memory page, storing an indication of the identifier data injected into each of the memory pages, determining an attempt to access at least one of the memory pages, determining any of the identifier data present on a memory page associated with the attempt, comparing the indication of the identifier data with the determined identifier data present on the memory page, and, based on the comparison, determining whether to allow the access.
摘要翻译：用于确保电子设备的技术包括确定一个或多个存储器页面的地址，将每个存储器页面的一部分标识符数据注入存储器页面，存储注入到每个存储器页面中的标识符数据的指示，访问存储器页面中的至少一个，确定存在于与尝试相关联的存储器页面上的任何标识符数据，将标识符数据的指示与存储在页面上的确定的标识符数据进行比较，并且基于该比较，确定是否允许访问。

54. 发明申请

US20140245430A1 REGULATING ACCESS TO AND PROTECTING PORTIONS OF APPLICATIONS OF VIRTUAL MACHINES 审中-公开
标题翻译：监控虚拟机的应用和保护部分
公开(公告)号：US20140245430A1
公开(公告)日：2014-08-28
申请号：US14272440
申请日：2014-05-07
申请人： Harshawardhan Vipat , Ravi L. Sahita , Roshni Chatterjee , Madhukar Tallam
发明人： Harshawardhan Vipat , Ravi L. Sahita , Roshni Chatterjee , Madhukar Tallam
IPC分类号： G06F21/44 , G06F9/455
CPC分类号： G06F21/629 , G06F9/45533 , G06F9/45558 , G06F12/145 , G06F21/44 , G06F21/53 , G06F21/566 , G06F21/6218 , G06F2009/45583 , G06F2009/45587 , G06F2212/151 , G06F2221/033
摘要： Embodiments of apparatus, computer-implemented methods, systems, and computer-readable media are described herein for a virtual machine manager, wherein the virtual machine manager is configured to selectively employ different views with different permissions to map guest physical memory of a virtual machine of the apparatus to host physical memory of the apparatus, to regulate access to and protect different portions of an application of the virtual machine that resides in different portions of the physical memory. Other embodiments may be described and/or claimed.
摘要翻译：这里描述了用于虚拟机管理器的装置，计算机实现的方法，系统和计算机可读介质的实施例，其中虚拟机管理器被配置为选择性地采用具有不同权限的不同视图来映射虚拟机的虚拟机的客户物理存储器用于承载设备的物理存储器的装置，以调节对位于物理存储器的不同部分中的虚拟机的应用的不同部分的访问和保护。可以描述和/或要求保护其他实施例。

55. 发明授权

US08776245B2 Executing trusted applications with reduced trusted computing base 有权
标题翻译：通过减少可信计算基础执行可信应用程序
公开(公告)号：US08776245B2
公开(公告)日：2014-07-08
申请号：US12645900
申请日：2009-12-23
申请人： Ravi L. Sahita , Ulhas S. Warrier , Prashant Dewan , Ranjit S. Narjala
发明人： Ravi L. Sahita , Ulhas S. Warrier , Prashant Dewan , Ranjit S. Narjala
IPC分类号： G06F21/00 , G06F21/57 , G06F21/50
CPC分类号： G06F21/57 , G06F21/50 , G06F2221/2149 , G06F2221/2153
摘要： A system for executing trusted applications with a reduced trusted computing base. In one embodiment, the system includes a processor to dynamically instantiate an application protection module in response to a request by a program to be executed under a trusted mode. The system further includes memory to store the program which is capable of interacting with a remote service for security verification. In one embodiment, the application protection module includes a processor-measured application protection service (P-MAPS) operable to measure and to provide protection to the application.
摘要翻译：用于使用减少的可信计算基础来执行可信应用的系统。在一个实施例中，系统包括处理器，以响应于在可信模式下执行的程序的请求来动态地实例化应用保护模块。该系统还包括用于存储能够与远程服务进行交互以进行安全验证的程序的存储器。在一个实施例中，应用保护模块包括可操作以测量并向应用提供保护的经处理器测量的应用保护服务（P-MAPS）。

56. 发明申请

US20140156972A1 Control Transfer Termination Instructions Of An Instruction Set Architecture (ISA) 有权
标题翻译：指令集架构（ISA）的控制传输终止指令
公开(公告)号：US20140156972A1
公开(公告)日：2014-06-05
申请号：US13690221
申请日：2012-11-30
申请人： Vedyvas Shanbhogue , Jason W. Brandt , Uday R. Savagaonkar , Ravi L. Sahita
发明人： Vedyvas Shanbhogue , Jason W. Brandt , Uday R. Savagaonkar , Ravi L. Sahita
IPC分类号： G06F9/30 , G06F9/38
CPC分类号： G06F21/71 , G06F9/3005 , G06F9/30054 , G06F9/30076 , G06F9/3012 , G06F9/30145 , G06F9/3851 , G06F9/3857 , G06F9/3861 , G06F21/52
摘要： In an embodiment, the present invention includes a processor having an execution logic to execute instructions and a control transfer termination (CTT) logic coupled to the execution logic. This logic is to cause a CTT fault to be raised if a target instruction of a control transfer instruction is not a CTT instruction. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，本发明包括具有执行指令的执行逻辑和耦合到执行逻辑的控制传输终止（CTT）逻辑的处理器。如果控制传输指令的目标指令不是CTT指令，则该逻辑是引起CTT故障。描述和要求保护其他实施例。

57. 发明申请

US20140041033A1 HARDWARE ENFORCED MEMORY ACCESS PERMISSIONS 有权
标题翻译：硬件执行存储器访问许可
公开(公告)号：US20140041033A1
公开(公告)日：2014-02-06
申请号：US13995360
申请日：2011-12-30
申请人： David M. Durham , Ravi L. Sahita , Prashant Dewan
发明人： David M. Durham , Ravi L. Sahita , Prashant Dewan
IPC分类号： G06F12/14
CPC分类号： G06F12/1458 , G06F21/121 , G06F21/50 , G06F21/79
摘要： Embodiments of apparatuses and methods for hardware enforced memory access permissions are disclosed. In one embodiment, a processor includes address translation hardware and memory access hardware. The address translation hardware is to support translation of a first address, used by software to access a memory, to a second address, used by the processor to access the memory. The memory access hardware is to detect an access permission violation.
摘要翻译：公开了用于硬件强制存储器访问许可的装置和方法的实施例。在一个实施例中，处理器包括地址转换硬件和存储器访问硬件。地址转换硬件是支持由软件使用的访问存储器的第一地址到由处理器使用以访问存储器的第二地址的翻译。内存访问硬件是检测访问权限冲突。

58. 发明申请

US20120255015A1 METHOD AND APPARATUS FOR TRANSPARENTLY INSTRUMENTING AN APPLICATION PROGRAM 有权
标题翻译：透明度测量应用程序的方法和设备
公开(公告)号：US20120255015A1
公开(公告)日：2012-10-04
申请号：US13076378
申请日：2011-03-30
申请人： Ravi L. Sahita , David M. Durham , Prashant Dewan , Manohar R. Castelino
发明人： Ravi L. Sahita , David M. Durham , Prashant Dewan , Manohar R. Castelino
IPC分类号： G06F11/00 , G06F9/44
CPC分类号： G06F21/54 , G06F11/3644 , G06F21/566
摘要： Generally, this disclosure describes systems and methods for transparently instrumenting a computer process. The systems and methods are configured to allow instrumenting executable code while permitting legacy memory scanning tools to monitor corresponding uninstrumented executable code stored in memory.
摘要翻译：通常，本公开描述了用于透明地测试计算机进程的系统和方法。这些系统和方法被配置为允许检测可执行代码，同时允许旧的存储器扫描工具来监视存储在存储器中的相应的未被记录的可执行代码。

59. 发明申请

US20110154500A1 Executing Trusted Applications with Reduced Trusted Computing Base 有权
标题翻译：使用可信赖的计算机基础执行可信赖的应用程序
公开(公告)号：US20110154500A1
公开(公告)日：2011-06-23
申请号：US12645900
申请日：2009-12-23
申请人： Ravi L. Sahita , Ulhas S. Warrier , Prashant Dewan , Ranjit S. Narjala
发明人： Ravi L. Sahita , Ulhas S. Warrier , Prashant Dewan , Ranjit S. Narjala
IPC分类号： G06F21/00
CPC分类号： G06F21/57 , G06F21/50 , G06F2221/2149 , G06F2221/2153
摘要： A system for executing trusted applications with a reduced trusted computing base. In one embodiment, the system includes a processor to dynamically instantiate an application protection module in response to a request by a program to be executed under a trusted mode. The system further includes memory to store the program which is capable of interacting with a remote service for security verification. In one embodiment, the application protection module includes a processor-measured application protection service (P-MAPS) operable to measure and to provide protection to the application.
摘要翻译：用于使用减少的可信计算基础来执行可信应用的系统。在一个实施例中，系统包括处理器，以响应于在可信模式下执行的程序的请求来动态地实例化应用保护模块。该系统还包括用于存储能够与远程服务进行交互以进行安全验证的程序的存储器。在一个实施例中，应用保护模块包括可操作以测量并向应用提供保护的经处理器测量的应用保护服务（P-MAPS）。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式