专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090183261A1 MALWARE DETECTION WITH TAINT TRACKING 有权
标题翻译：恶意跟踪检测
公开(公告)号：US20090183261A1
公开(公告)日：2009-07-16
申请号：US12013475
申请日：2008-01-14
申请人： Marcus Peinado , Luis Irun-Briz , Laurent S. Visconti , Mark L. Niehaus , Nikola Livic
发明人： Marcus Peinado , Luis Irun-Briz , Laurent S. Visconti , Mark L. Niehaus , Nikola Livic
IPC分类号： G06F21/00 , G06F17/00
CPC分类号： G06F21/565
摘要： Malware may be identified based on attempts to use tainted data in certain ways, such as by attempting to execute the tainted data, by attempting to modify execution control based on tainted data, or by attempting to apply an existing function to the tainted data. A data's taint is determined based on the location from which the data originates. When data from a tainted source is moved to an otherwise non-tainted destination, the taint may be propagated from the source to the destination, to indicate that the destination is now of unknown safety. A component may be used to observe the operation of a process, in order to determine what data is being moved with respect to the process, and how that data is being used.
摘要翻译：可以基于尝试以某些方式使用污染数据，例如通过尝试通过尝试基于污染数据修改执行控制或通过尝试将已有功能应用于污染数据来执行污染数据来识别恶意软件。基于数据来源的位置确定数据的污点。当来自污染源的数据被移动到另外没有污染的目的地时，污点可以从源传播到目的地，以指示目的地现在是未知的安全的。可以使用组件来观察进程的操作，以便确定相对于进程移动什么数据以及如何使用该数据。

2. 发明授权

US06848097B1 Debugging techniques in a multithreaded environment 失效
公开(公告)号：US06848097B1
公开(公告)日：2005-01-25
申请号：US10247276
申请日：2002-09-18
申请人： Gail A. Alverson , Burton J. Smith , Laurence S. Kaplan , Mark L. Niehaus
发明人： Gail A. Alverson , Burton J. Smith , Laurence S. Kaplan , Mark L. Niehaus
IPC分类号： G06F11/36 , G06F9/44
CPC分类号： G06F11/362
摘要： A system for debugging targets using various techniques, some of which are particularly useful in a multithread environment. These techniques include implementing breakpoints using out-of-line instruction emulation so that an instruction replaced with a breakpoint instruction does not need to be returned to its original location for single-step execution, executing a debugger nub for each target as part of the target task but using a nub task thread for the nub execution that is separate from the target task threads, providing immunity from breakpoints for specified threads such as the nub thread via specialized breakpoint handlers used by those threads, and virtualizing the debugger nub such that a shared root nub provides a uniform interface between the debugger and the target while specialized nubs provide differing functionality based on the type of target being debugged.

3. 发明授权

US08074281B2 Malware detection with taint tracking 有权
标题翻译：恶意软件检测与污迹跟踪
公开(公告)号：US08074281B2
公开(公告)日：2011-12-06
申请号：US12013475
申请日：2008-01-14
申请人： Marcus Peinado , Luis Irun-Briz , Laurent S. Visconti , Mark L. Niehaus , Nikola Livic
发明人： Marcus Peinado , Luis Irun-Briz , Laurent S. Visconti , Mark L. Niehaus , Nikola Livic
IPC分类号： G06F12/14
CPC分类号： G06F21/565
摘要： Malware may be identified based on attempts to use tainted data in certain ways, such as by attempting to execute the tainted data, by attempting to modify execution control based on tainted data, or by attempting to apply an existing function to the tainted data. A data's taint is determined based on the location from which the data originates. When data from a tainted source is moved to an otherwise non-tainted destination, the taint may be propagated from the source to the destination, to indicate that the destination is now of unknown safety. A component may be used to observe the operation of a process, in order to determine what data is being moved with respect to the process, and how that data is being used.
摘要翻译：可以基于尝试以某些方式使用污染数据，例如通过尝试通过尝试基于污染的数据来修改执行控制或者通过尝试将已有功能应用于污染的数据来执行受污染的数据来识别恶意软件。基于数据来源的位置确定数据的污点。当来自污染源的数据被移动到另外没有污染的目的地时，污点可以从源传播到目的地，以指示目的地现在是未知的安全的。可以使用组件来观察进程的操作，以便确定相对于进程移动什么数据以及如何使用该数据。

4. 发明授权

US07428727B2 Debugging techniques in a multithreaded environment 有权
标题翻译：在多线程环境中调试技术
公开(公告)号：US07428727B2
公开(公告)日：2008-09-23
申请号：US10937688
申请日：2004-09-09
申请人： Gail A. Alverson , Burton J. Smith , Laurence S. Kaplan , Mark L. Niehaus
发明人： Gail A. Alverson , Burton J. Smith , Laurence S. Kaplan , Mark L. Niehaus
IPC分类号： G06F11/00
CPC分类号： G06F11/362
摘要： A system for debugging targets using various techniques, some of which are particularly useful in a multithread environment. These techniques include implementing breakpoints using out-of-line instruction emulation so that an instruction replaced with a breakpoint instruction does not need to be returned to its original location for single-step execution, executing a debugger nub for each target as part of the target task but using a nub task thread for the nub execution that is separate from the target task threads, providing immunity from breakpoints for specified threads such as the nub thread via specialized breakpoint handlers used by those threads, and virtualizing the debugger nub such that a shared root nub provides a uniform interface between the debugger and the target while specialized nubs provide differing functionality based on the type of target being debugged.
摘要翻译：用于使用各种技术调试目标的系统，其中一些在多线程环境中特别有用。这些技术包括使用脱机指令仿真实现断点，以便用断点指令替换的指令不需要返回到其原始位置进行单步执行，为目标的一部分执行调试器nub 任务，但使用与目标任务线程分离的nub执行的nub任务线程，通过这些线程使用的专门的断点处理程序提供对指定线程（例如nub线程）的断点的免疫，以及虚拟化调试器nub，使得共享根节点在调试器和目标器之间提供了一个统一的界面，而专门的组件根据被调试的目标类型提供不同的功能。

5. 发明授权

US06480818B1 Debugging techniques in a multithreaded environment 有权
标题翻译：在多线程环境中调试技术
公开(公告)号：US06480818B1
公开(公告)日：2002-11-12
申请号：US09191985
申请日：1998-11-13
申请人： Gail A. Alverson , Burton J. Smith , Laurence S. Kaplan , Mark L. Niehaus
发明人： Gail A. Alverson , Burton J. Smith , Laurence S. Kaplan , Mark L. Niehaus
IPC分类号： G06F944
CPC分类号： G06F11/362
摘要： A system for debugging targets using various techniques, some of which are particularly useful in a multithread environment. These techniques include implementing breakpoints using out-of-line instruction emulation so that an instruction replaced with a breakpoint instruction does not need to be returned to its original location for single-step execution, executing a debugger nub for each target as part of the target task but using a nub task thread for the nub execution that is separate from the target task threads, providing immunity from breakpoints for specified threads such as the nub thread via specialized breakpoint handlers used by those threads, and virtualizing the debugger nub such that a shared root nub provides a uniform interface between the debugger and the target while specialized nubs provide differing functionality based on the type of target being debugged.
摘要翻译：用于使用各种技术调试目标的系统，其中一些在多线程环境中特别有用。这些技术包括使用脱机指令仿真实现断点，以便用断点指令替换的指令不需要返回到其原始位置进行单步执行，为目标的一部分执行调试器nub 任务，但使用与目标任务线程分离的nub执行的nub任务线程，通过这些线程使用的专门的断点处理程序提供对指定线程（例如nub线程）的断点的免疫，以及虚拟化调试器nub，使得共享根节点在调试器和目标器之间提供了一个统一的界面，而专门的组件根据被调试的目标类型提供不同的功能。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式