专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090192780A1 HARDWARE EMULATION USING ON-THE-FLY VIRTUALIZATION 有权
标题翻译：使用飞行虚拟化的硬件仿真
公开(公告)号：US20090192780A1
公开(公告)日：2009-07-30
申请号：US12022184
申请日：2008-01-30
申请人： Martim Carbone , Bernhard Jansen , HariGovind V. Ramasamy , Matthias Schunter , Axel Tanner , Diego M. Zamboni
发明人： Martim Carbone , Bernhard Jansen , HariGovind V. Ramasamy , Matthias Schunter , Axel Tanner , Diego M. Zamboni
IPC分类号： G06F9/455 , G06F3/00
CPC分类号： G06F9/45537 , G06F11/0712 , G06F11/0793
摘要： At least one anomaly associated with at least one actual hardware element in a computer system having a plurality of hardware elements is addressed. The anomaly is detected, and, responsive to the detection, a virtualization layer is inserted between (i) an operating system of the computer system, and (ii) the plurality of hardware elements. Hardware emulation and/or selective hardware activation/deactivation are performed on the at least one actual hardware element by the virtualization layer. The insertion of the virtualization layer is accomplished in an on-the-fly manner.
摘要翻译：与具有多个硬件元件的计算机系统中的至少一个实际硬件元件相关联的至少一个异常被寻址。检测到异常，并且响应于检测，在（i）计算机系统的操作系统和（ii）多个硬件元件之间插入虚拟化层。通过虚拟化层在至少一个实际硬件元件上执行硬件仿真和/或选择性硬件激活/去激活。虚拟化层的插入是以飞行方式实现的。

2. 发明授权

US09250942B2 Hardware emulation using on-the-fly virtualization 有权
标题翻译：硬件仿真使用即时虚拟化
公开(公告)号：US09250942B2
公开(公告)日：2016-02-02
申请号：US12022184
申请日：2008-01-30
申请人： Martim Carbone , Bernhard Jansen , HariGovind V. Ramasamy , Matthias Schunter , Axel Tanner , Diego M. Zamboni
发明人： Martim Carbone , Bernhard Jansen , HariGovind V. Ramasamy , Matthias Schunter , Axel Tanner , Diego M. Zamboni
IPC分类号： G06F9/455 , G06F11/07
CPC分类号： G06F9/45537 , G06F11/0712 , G06F11/0793
摘要： At least one anomaly associated with at least one actual hardware element in a computer system having a plurality of hardware elements is addressed. The anomaly is detected, and, responsive to the detection, a virtualization layer is inserted between (i) an operating system of the computer system, and (ii) the plurality of hardware elements. Hardware emulation and/or selective hardware activation/deactivation are performed on the at least one actual hardware element by the virtualization layer. The insertion of the virtualization layer is accomplished in an on-the-fly manner.
摘要翻译：与具有多个硬件元件的计算机系统中的至少一个实际硬件元件相关联的至少一个异常被寻址。检测到异常，并且响应于检测，在（i）计算机系统的操作系统和（ii）多个硬件元件之间插入虚拟化层。通过虚拟化层在至少一个实际硬件元件上执行硬件仿真和/或选择性硬件激活/去激活。虚拟化层的插入是以飞行方式实现的。

3. 发明授权

US08584254B2 Data access reporting platform for secure active monitoring 有权
标题翻译：数据访问报告平台，用于安全主动监控
公开(公告)号：US08584254B2
公开(公告)日：2013-11-12
申请号：US13314209
申请日：2011-12-08
申请人： Weidong Cui , Marcus Peinado , Martim Carbone
发明人： Weidong Cui , Marcus Peinado , Martim Carbone
IPC分类号： G06F15/16 , H04L29/06 , H04L9/32 , G06F21/00 , G06F7/04
CPC分类号： G06F21/53 , G06F12/1441 , G06F21/566
摘要： Technologies pertaining to detecting accesses to monitored regions of memory and transmitting data to a protection system responsive to the detecting are described herein. A region of memory that includes objects in an object graph utilized by an operating system to determine which processes to execute and an order to execute such processes is monitored. If a process executing on a processor attempts to write to an object in the object graph, a field that is being written to is identified, and a determination is made regarding whether the field includes a pointer. Based upon whether the field includes a pointer, a type of write desirably undertaken by the object is ascertained, and an object event is transmitted to the protection system that informs the protection system of the type of write.
摘要翻译：本文描述了关于检测对监视的存储器区域的访问以及响应于检测将数据发送到保护系统的技术。包括由操作系统使用的对象图中的对象来确定执行哪些进程和执行这些处理的命令的内存区域。如果在处理器上执行的进程尝试写入对象图中的对象，则识别正被写入的字段，并且确定该字段是否包括指针。基于该字段是否包括指针，确定由对象期望地执行的写入类型，并且将对象事件发送到向保护系统通知写入类型的保护系统。

4. 发明授权

US09003402B1 Method and system for injecting function calls into a virtual machine 有权
标题翻译：将功能调用注入虚拟机的方法和系统
公开(公告)号：US09003402B1
公开(公告)日：2015-04-07
申请号：US12969334
申请日：2010-12-15
申请人： Martim Carbone , Matthew Conover , Bruce Robert Montague
发明人： Martim Carbone , Matthew Conover , Bruce Robert Montague
IPC分类号： G06F9/455
CPC分类号： G06F9/45554 , G06F9/4484 , G06F9/45558 , G06F2009/45587
摘要： A method and apparatus for injecting function calls into a virtual machine whereby a Function Call Injection (FCI) process is employed, through which a Secure Virtual Machine (SVM) is used to trigger desired function call invocations inside a Guest Virtual Machine (GVM) by externally manipulating the GVMs memory and CPU register contents using a security API. Once the triggered function is executed, control is then returned at the originating SVM invocation point. Therefore, the GVM state is manipulated to externally inject function calls, making it possible to create control appliances which do not require an in-GVM agent.
摘要翻译：一种用于将功能调用注入到虚拟机中的方法和装置，由此使用功能呼叫注入（FCI）过程，通过该方法使用安全虚拟机（SVM）来触发来宾虚拟机（GVM）内的期望的功能呼叫调用，由使用安全API外部操作GVM内存和CPU寄存器内容。一旦执行了触发功能，则在始发SVM调用点处返回控制。因此，GVM状态被操纵以外部注入功能调用，使得可以创建不需要GVM代理的控制设备。

5. 发明申请

US20130152207A1 DATA ACCESS REPORTING PLATFORM FOR SECURE ACTIVE MONITORING 有权
标题翻译：数据访问报告平台，用于安全的主动监控
公开(公告)号：US20130152207A1
公开(公告)日：2013-06-13
申请号：US13314209
申请日：2011-12-08
申请人： Weidong Cui , Marcus Peinado , Martim Carbone
发明人： Weidong Cui , Marcus Peinado , Martim Carbone
IPC分类号： G06F12/14 , G06F12/16
CPC分类号： G06F21/53 , G06F12/1441 , G06F21/566
摘要： Technologies pertaining to detecting accesses to monitored regions of memory and transmitting data to a protection system responsive to the detecting are described herein. A region of memory that includes objects in an object graph utilized by an operating system to determine which processes to execute and an order to execute such processes is monitored. If a process executing on a processor attempts to write to an object in the object graph, a field that is being written to is identified, and a determination is made regarding whether the field includes a pointer. Based upon whether the field includes a pointer, a type of write desirably undertaken by the object is ascertained, and an object event is transmitted to the protection system that informs the protection system of the type of write.
摘要翻译：本文描述了关于检测对监视的存储器区域的访问以及响应于检测将数据发送到保护系统的技术。包括由操作系统使用的对象图中的对象来确定执行哪些进程和执行这些处理的命令的内存区域。如果在处理器上执行的进程尝试写入对象图中的对象，则识别正被写入的字段，并且确定该字段是否包括指针。基于该字段是否包括指针，确定由对象期望地执行的写入类型，并且将对象事件发送到向保护系统通知写入类型的保护系统。

6. 发明申请

US20090300307A1 PROTECTION AND SECURITY PROVISIONING USING ON-THE-FLY VIRTUALIZATION 审中-公开
标题翻译：使用虚拟虚拟化进行保护和安全保护
公开(公告)号：US20090300307A1
公开(公告)日：2009-12-03
申请号：US12130159
申请日：2008-05-30
申请人： Martim Carbone , Bernhard Jansen , HariGovind V. Ramasamy , Matthias Schunter , Axel Tanner , Diego Zamboni
发明人： Martim Carbone , Bernhard Jansen , HariGovind V. Ramasamy , Matthias Schunter , Axel Tanner , Diego Zamboni
IPC分类号： G06F12/16
CPC分类号： G06F21/53 , G06F9/45541 , G06F9/45558 , G06F2009/45587
摘要： A virtualization layer is inserted between (i) an operating system of a computer system, and (ii) at least one of a memory module and a storage module of the computer system. At least one of read access and write access to at least one portion of the at least one of a memory module and a storage module is controlled, with the virtualization layer. The insertion of the virtualization layer is accomplished in an on-the-fly manner (that is, without rebooting the computer system) An additional aspect includes controlling installation of a security program from the virtualization layer.
摘要翻译：在（i）计算机系统的操作系统和（ii）计算机系统的存储器模块和存储模块中的至少一个之间插入虚拟化层。使用虚拟化层来控制对存储器模块和存储模块中的至少一个的至少一部分的读访问和写入访问中的至少一个。虚拟化层的插入是以动态的方式实现的（即，不重新启动计算机系统）。另外的方面包括控制来自虚拟化层的安全程序的安装。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式