专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09390031B2 Page coloring to associate memory pages with programs 有权
标题翻译：页面着色以将内存页与程序相关联
公开(公告)号：US09390031B2
公开(公告)日：2016-07-12
申请号：US11323446
申请日：2005-12-30
申请人： David M. Durham , Ravi L. Sahita , Dylan C. Larson , Rajendra S. Yavatkar
发明人： David M. Durham , Ravi L. Sahita , Dylan C. Larson , Rajendra S. Yavatkar
IPC分类号： G06F12/14 , G06F21/74 , G06F21/79
CPC分类号： G06F12/1475 , G06F12/1491 , G06F21/74 , G06F21/79
摘要： Apparatuses and methods for page coloring to associate memory pages with programs are disclosed. In one embodiment, an apparatus includes a paging unit and an interface to access a memory. The paging unit includes translation logic and comparison logic. The translation logic is to translate a first address to a second address. The first address is to be provided by an instruction stored in a first page in the memory. The translation is based on an entry in a data structure, and the entry is to include a base address of a second page in the memory including the second address. The comparison logic is to compare the color of the first page to the color of the second page. The color of the first page is to indicate association of the first page with a first program including the first instruction. The data structure entry is also to include the color of the second page to indicate association of the second page with the first program or a second program.
摘要翻译：公开了用于将内存页与程序相关联的页着色的装置和方法。在一个实施例中，一种装置包括寻呼单元和用于访问存储器的接口。寻呼单元包括翻译逻辑和比较逻辑。翻译逻辑是将第一个地址转换为第二个地址。第一个地址由存储在第一页的指令提供。翻译是基于数据结构中的条目，并且该条目是在包括第二地址的存储器中包括第二页的基地址。比较逻辑是将第一页的颜色与第二页的颜色进行比较。第一页的颜色是指示第一页与包括第一指令的第一程序的关联。数据结构条目还包括第二页的颜色以指示第二页与第一程序或第二程序的关联。

2. 发明授权

US06973488B1 Providing policy information to a remote device 失效
标题翻译：向远程设备提供策略信息
公开(公告)号：US06973488B1
公开(公告)日：2005-12-06
申请号：US09539916
申请日：2000-03-31
申请人： Rajendra S. Yavatkar , David M. Durham , Russell J. Fenger
发明人： Rajendra S. Yavatkar , David M. Durham , Russell J. Fenger
IPC分类号： G06F15/16 , H04L29/06 , H04L29/08
CPC分类号： H04L67/22 , H04L63/0263 , H04L69/08
摘要： Policy information is distributed to remote network devices by mapping high-level policy information into low-level configuration information and distributing the low-level configuration information to the remote network devices.
摘要翻译：将高级策略信息映射为低级配置信息，并将低级配置信息分发到远程网络设备，将策略信息分配给远程网络设备。

3. 发明授权

US06601082B1 System and method for managing actions provided by a network using a policy tree 有权
标题翻译：用于管理由网络使用策略树提供的操作的系统和方法
公开(公告)号：US06601082B1
公开(公告)日：2003-07-29
申请号：US09365101
申请日：1999-07-30
申请人： David M. Durham , Russell J. Fenger , Rajendra S. Yavatkar
发明人： David M. Durham , Russell J. Fenger , Rajendra S. Yavatkar
IPC分类号： G06F900
CPC分类号： H04L41/28 , H04L63/0227 , H04L63/105
摘要： A system and method for managing a network using a policy tree which includes a plurality of levels (e.g., two levels, five levels, etc.) is described. When the network receives a request to provide an action to a particular source, the network determines if the action is available as a function of at least one level of the plurality of levels. If the action is available, the network determines if the particular source is authorized to be provided with the action as a function of at least one rule of at least one further level of the plurality of levels. If the particular source is authorized, the network provides the action to the particular source.
摘要翻译：描述了使用包括多个级别（例如，两个级别，五个等级等）的策略树来管理网络的系统和方法。当网络接收到向特定源提供动作的请求时，网络确定该动作是否可用作为多个级别中的至少一个级别的函数。如果动作可用，则网络确定特定源是否被授权被提供作为多个级别中的至少一个进一步级别的至少一个规则的函数的动作。如果特定的源被授权，则网络向特定的源提供动作。

4. 发明申请

US20180046803A1 TECHNOLOGIES FOR HARDWARE ASSISTED NATIVE MALWARE DETECTION 审中-公开
公开(公告)号：US20180046803A1
公开(公告)日：2018-02-15
申请号：US15235806
申请日：2016-08-12
申请人： Xiaoning Li , Ravi L. Sahita , David M. Durham
发明人： Xiaoning Li , Ravi L. Sahita , David M. Durham
IPC分类号： G06F21/56 , G06F21/52 , G06F11/14
CPC分类号： G06F21/566 , G06F11/1417 , G06F11/302 , G06F11/3089 , G06F21/54 , G06F2201/84
摘要： Technologies for hardware assisted native malware detection include a computing device. The computing device includes one or more processors with hook logic to monitor for execution of branch instructions of an application, compare the monitored branch instructions to filter criteria, and determine whether a monitored branch instruction satisfies the filter criteria. Additionally, the computing device includes a malware detector to provide the filter criteria to the hook logic, provide an address of a callback function to the hook logic to be executed in response to a determination that a monitored branch instruction satisfies the filter criteria, and analyze, in response to execution of the callback function, the monitored branch instruction to determine whether the monitored branch instruction is indicative of malware. Other embodiments are also described and claimed.

5. 发明授权

US08479295B2 Method and apparatus for transparently instrumenting an application program 有权
标题翻译：用于透明地调试应用程序的方法和装置
公开(公告)号：US08479295B2
公开(公告)日：2013-07-02
申请号：US13076378
申请日：2011-03-30
申请人： Ravi L. Sahita , David M. Durham , Prashant Dewan , Manohar R. Castelino
发明人： Ravi L. Sahita , David M. Durham , Prashant Dewan , Manohar R. Castelino
IPC分类号： G06F12/14 , G06F9/44
CPC分类号： G06F21/54 , G06F11/3644 , G06F21/566
摘要： Generally, this disclosure describes systems and methods for transparently instrumenting a computer process. The systems and methods are configured to allow instrumenting executable code while permitting legacy memory scanning tools to monitor corresponding uninstrumented executable code stored in memory.
摘要翻译：通常，本公开描述了用于透明地测试计算机进程的系统和方法。这些系统和方法被配置为允许检测可执行代码，同时允许旧的存储器扫描工具来监视存储在存储器中的相应的未被记录的可执行代码。

6. 发明授权

US10515023B2 System for address mapping and translation protection 有权
公开(公告)号：US10515023B2
公开(公告)日：2019-12-24
申请号：US15088739
申请日：2016-04-01
申请人： Ravi L. Sahita , Gilbert Neiger , Vedvyas Shanbhogue , David M. Durham , Andrew V. Anderson , David A. Koufaty , Asit K. Mallick , Arumugam Thiyagarajah , Barry E. Huntley , Deepak K. Gupta , Michael Lemay , Joseph F. Cihula , Baiju V. Patel
发明人： Ravi L. Sahita , Gilbert Neiger , Vedvyas Shanbhogue , David M. Durham , Andrew V. Anderson , David A. Koufaty , Asit K. Mallick , Arumugam Thiyagarajah , Barry E. Huntley , Deepak K. Gupta , Michael Lemay , Joseph F. Cihula , Baiju V. Patel
IPC分类号： G06F12/00 , G06F12/14 , G06F12/1009 , G06F9/455 , G06F12/1027 , G06F21/78
摘要： This disclosure is directed to a system for address mapping and translation protection. In one embodiment, processing circuitry may include a virtual machine manager (VMM) to control specific guest linear address (GLA) translations. Control may be implemented in a performance sensitive and secure manner, and may be capable of improving performance for critical linear address page walks over legacy operation by removing some or all of the cost of page walking extended page tables (EPTs) for critical mappings. Alone or in combination with the above, certain portions of a page table structure may be selectively made immutable by a VMM or early boot process using a sub-page policy (SPP). For example, SPP may enable non-volatile kernel and/or user space code and data virtual-to-physical memory mappings to be made immutable (e.g., non-writable) while allowing for modifications to non-protected portions of the OS paging structures and particularly the user space.

7. 发明授权

US09405570B2 Low latency virtual machine page table management 有权
标题翻译：低延迟虚拟机页面表管理
公开(公告)号：US09405570B2
公开(公告)日：2016-08-02
申请号：US13341891
申请日：2011-12-30
申请人： Ravi L. Sahita , David M. Durham , Gilbert Neiger , Andrew V. Anderson , Scott D. Rodgers
发明人： Ravi L. Sahita , David M. Durham , Gilbert Neiger , Andrew V. Anderson , Scott D. Rodgers
IPC分类号： G06F9/455
CPC分类号： G06F9/45558 , G06F2009/45583
摘要： Various embodiments of this disclosure may describe method, apparatus and system for reducing system latency caused by switching memory page permission views between programs while still protecting critical regions of the memory from attacks of malwares. Other embodiments may be disclosed and claimed.
摘要翻译：本公开的各种实施例可以描述用于减少由程序之间切换存储器页面许可视图而引起的系统延迟的方法，装置和系统，同时仍保护存储器的关键区域免受恶意软件的攻击。可以公开和要求保护其他实施例。

8. 发明申请

US20160179665A1 CONTROL OF ENTRY INTO PROTECTED MEMORY VIEWS 有权
标题翻译：进入受保护的存储器视图的控制
公开(公告)号：US20160179665A1
公开(公告)日：2016-06-23
申请号：US14581730
申请日：2014-12-23
申请人： Michael LeMay , Ravi L. Sahita , Barry E. Huntley , David M. Durham , Vedvyas Shanbhogue
发明人： Michael LeMay , Ravi L. Sahita , Barry E. Huntley , David M. Durham , Vedvyas Shanbhogue
IPC分类号： G06F12/08 , G06F9/455
CPC分类号： G06F12/08 , G06F9/45558 , G06F12/1009 , G06F12/1491 , G06F21/79 , G06F2009/45583 , G06F2009/45591 , G06F2212/151 , G06F2212/657
摘要： Generally, this disclosure provides systems, devices, methods and computer readable media for controlled memory view switching. The system may include a memory module comprising a shared address space between a first memory view and a second memory view. The system may also include a virtual machine monitor (VMM) to maintain a list of Controlled View Switch (CVS) descriptors. The system may further include a processor to receive a memory view switch request and to execute an instruction to save processor state information and switch from the first memory view to the second memory view, wherein the second memory view is specified by an extended page table pointer (EPTP) provided by one of the CVS descriptors.
摘要翻译：通常，本公开提供了用于受控存储器视图切换的系统，设备，方法和计算机可读介质。该系统可以包括存储器模块，该存储器模块包括第一存储器视图和第二存储器视图之间的共享地址空间。该系统还可以包括维护受控视图切换（CVS）描述符的列表的虚拟机监视器（VMM）。该系统还可以包括处理器，用于接收存储器视图切换请求并且执行用于保存处理器状态信息并从第一存储器视图切换到第二存储器视图的指令，其中第二存储器视图由扩展页表指针（EPTP）由其中一个CVS描述符提供。

9. 发明授权

US08635705B2 Computer system and method with anti-malware 有权
标题翻译：具有反恶意软件的计算机系统和方法
公开(公告)号：US08635705B2
公开(公告)日：2014-01-21
申请号：US12658876
申请日：2010-02-17
申请人： Ravi L. Sahita , David M. Durham , Steve Orrin , Yasser Rasheed , Prasanna G. Mulgaonkar , Paul S. Schmitz , Hormuzd M. Khosravi
发明人： Ravi L. Sahita , David M. Durham , Steve Orrin , Yasser Rasheed , Prasanna G. Mulgaonkar , Paul S. Schmitz , Hormuzd M. Khosravi
IPC分类号： G06F11/30 , G06F12/14 , G06F12/16 , G08B23/00
CPC分类号： G06F21/53 , G06F21/55
摘要： In some embodiments, approaches may provide an out-of-band (OOB) agent to protect a platform. The OOB agent may be able to use non-TRS methods to measure and protect an in-band security agent. In some embodiments, a manageability engine can provide out of band connectivity to the in-band and out-of-band security agents and provide access to the system memory resources without having to rely on OS services. This can be used for a trusted anti-malware and remediation service.
摘要翻译：在一些实施例中，方法可以提供带外（OOB）代理来保护平台。 OOB代理可能能够使用非TRS方法来测量和保护带内安全代理。在一些实施例中，可管理性引擎可以向带内和带外安全代理提供带外连接，并提供对系统存储器资源的访问，而不必依赖于OS服务。这可以用于受信任的反恶意软件和修复服务。

10. 发明授权

US09286245B2 Hardware enforced memory access permissions 有权
标题翻译：硬件强制执行内存访问权限
公开(公告)号：US09286245B2
公开(公告)日：2016-03-15
申请号：US13995360
申请日：2011-12-30
申请人： David M. Durham , Ravi L. Sahita , Prashant Dewan
发明人： David M. Durham , Ravi L. Sahita , Prashant Dewan
IPC分类号： G06F21/00 , G06F12/14 , G06F21/50 , G06F21/12 , G06F21/79
CPC分类号： G06F12/1458 , G06F21/121 , G06F21/50 , G06F21/79
摘要： Embodiments of apparatuses and methods for hardware enforced memory access permissions are disclosed. In one embodiment, a processor includes address translation hardware and memory access hardware. The address translation hardware is to support translation of a first address, used by software to access a memory, to a second address, used by the processor to access the memory. The memory access hardware is to detect an access permission violation.
摘要翻译：公开了用于硬件强制存储器访问许可的装置和方法的实施例。在一个实施例中，处理器包括地址转换硬件和存储器访问硬件。地址转换硬件是支持由软件使用的访问存储器的第一地址到由处理器使用以访问存储器的第二地址的翻译。内存访问硬件是检测访问权限冲突。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式