专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2013130548A3 METHOD OF INSTRUCTION LOCATION RANDOMIZATION (ILR) AND RELATED SYSTEM 审中-公开
公开(公告)号：WO2013130548A3
公开(公告)日：2013-09-06
申请号：PCT/US2013/027944
申请日：2013-02-27
申请人： UNIVERSITY OF VIRGINIA PATENT FOUNDATION , HISER, Jason D. , NGUYEN-TUONG, Anh , CO, Michele , DAVIDSON, Jack W.
发明人： HISER, Jason D. , NGUYEN-TUONG, Anh , CO, Michele , DAVIDSON, Jack W.
IPC分类号： G06F12/00
摘要： A method and system for relocating executable instructions to arbitrary locations are disclosed. The instruction relocation may be arbitrary or random, and may operate on groups of instructions or individual instructions. Such relocation may be achieved through hardware or software, and may use a virtual machine, software dynamic translators, interpreters, or emulators. Instruction relocation may use or produce a specification governing how to relocate the desired instructions. Randomizing the location of instructions provides defenses against a variety of security attacks. The disclosed embodiments provide many advantages over other instruction relocation techniques, such as low runtime overhead, no required user interaction, applicability post-deployment, and the ability to operate on arbitrary executable programs.

2. 发明申请

WO2007008919A3 METHOD AND SYSTEM FOR SOFTWARE PROTECTION USING BINARY ENCODING 审中-公开
标题翻译：使用二进制编码的软件保护方法和系统
公开(公告)号：WO2007008919A3
公开(公告)日：2007-10-04
申请号：PCT/US2006026932
申请日：2006-07-11
申请人： UNIV VIRGINIA , DAVIDSON JACK , NGUYEN-TUONG ANH , ROWANHILL JONATHAN , EVANS DAVID , KNIGHT JOHN , FILIPI ADRIAN , HISER JASON , HU WEI
发明人： DAVIDSON JACK , NGUYEN-TUONG ANH , ROWANHILL JONATHAN , EVANS DAVID , KNIGHT JOHN , FILIPI ADRIAN , HISER JASON , HU WEI
IPC分类号： G06F11/00
CPC分类号： G06F21/50
摘要： Software is protected by encoding the target software instructions and decoding the target instructions.
摘要翻译：软件通过编码目标软件指令和解码目标指令来保护。

3. 发明申请

WO2014078585A2 METHODS, SYSTEMS AND COMPUTER READABLE MEDIA FOR DETECTING COMMAND INJECTION ATTACKS 审中-公开
标题翻译：用于检测指挥攻击的方法，系统和计算机可读介质
公开(公告)号：WO2014078585A2
公开(公告)日：2014-05-22
申请号：PCT/US2013/070180
申请日：2013-11-14
申请人： UNIVERSITY OF VIRGINIA PATENT FOUNDATION , NGUYEN-TUONG, Anh , DAVIDSON, Jack W. , CO, Michele , HISER, Jason D. , KNIGHT, John C.
发明人： NGUYEN-TUONG, Anh , DAVIDSON, Jack W. , CO, Michele , HISER, Jason D. , KNIGHT, John C.
IPC分类号： G06F21/54
CPC分类号： H04L63/105 , G06F17/241 , G06F21/51 , G06F21/554 , G06F21/57 , H04L63/1416 , H04L63/1466
摘要： Methods and systems are described for detecting command injection attacks. A positive, taint inference method includes receiving signature fragments on one hand, converting command injection instructions into command fragments on another hand, thus identifying potential attacks upon the condition that a command injection instruction includes critical untrusted parts by using signature fragments. A system detects command injection attacks using this kind of method, and remediates and rejects potential attacks.
摘要翻译：描述了用于检测命令注入攻击的方法和系统。一种积极的污染推理方法包括一方面接收签名片段，另一方面将命令注入指令转换为命令片段，从而在命令注入指令通过使用签名片段包括关键不可信部分的条件下识别潜在的攻击。系统使用这种方法检测命令注入攻击，并补救和拒绝潜在的攻击。

4. 发明申请

WO2009108245A2 SYSTEM, METHOD AND COMPUTER PROGRAM PRODUCT FOR PROTECTING SOFTWARE VIA CONTINUOUS ANTI-T AMPERING AND OBFUSCATION TRANSFORMS 审中-公开
标题翻译：系统，方法和计算机程序产品，通过连续的抗T激励和混淆转换来保护软件
公开(公告)号：WO2009108245A2
公开(公告)日：2009-09-03
申请号：PCT/US2008/087712
申请日：2008-12-19
申请人： UNIVERSITY OF VIRGINIA PATENT FOUNDATION , DAVIDSON, Jack, W. , HISER, Jason, D.
发明人： DAVIDSON, Jack, W. , HISER, Jason, D.
IPC分类号： H01M8/06
CPC分类号： G06F21/562 , G06F21/10 , G06F21/14 , G06F21/52 , G06F21/53 , G06F21/57 , G06F21/572 , G06F21/602 , G06F2221/033 , G06F2221/0724 , H04L2209/16
摘要： Method, system and computer program product for applying existing anti- tampering and obfuscation techniques to virtual machine technology and offers several distinct advantages. The anti-tampering and obfuscation transforms can be applied continuously to prevent adversaries from gaining information about the program through emulation or dynamic analysis. In addition, the encryption can be used to prevent hackers from gaining information using static attacks. The use of a virtual machine also allows for low overhead execution of the obfuscated binaries as well as finer adjustment of the amount of overhead that can be tolerated. In addition, more protection can be applied to specific portions of the application that can tolerate slowdown. The incorporation of a virtual machine also makes it easy to extend the technology to integrate new developments and resistance mechanisms, leading to less development time, increased savings, and quicker deployment.
摘要翻译：用于将现有的防篡改和模糊技术应用于虚拟机技术并提供若干独特优点的方法，系统和计算机程序产品。可以连续应用反篡改和模糊转换来防止攻击者通过仿真或动态分析获得有关该程序的信息。另外，加密可以用来防止黑客利用静态攻击获取信息。虚拟机的使用还可以降低混淆二进制文件的开销，同时还可以更好地调整可容忍的开销数量。另外，更多的保护可以应用于可以容忍减速的应用程序的特定部分。虚拟机的整合也使得扩展技术很容易集成新的开发和阻力机制，从而减少开发时间，节省更多资源和更快部署。

5. 发明申请

WO2007008919A2 METHOD AND SYSTEM FOR SOFTWARE PROTECTION USING BINARY ENCODING 审中-公开
标题翻译：使用二进制编码进行软件保护的方法和系统
公开(公告)号：WO2007008919A2
公开(公告)日：2007-01-18
申请号：PCT/US2006/026932
申请日：2006-07-11
申请人： UNIVERSITY OF VIRGINIA PATENT FOUNDATION , DAVIDSON, Jack , NGUYEN-TUONG, Anh , ROWANHILL, Jonathan , EVANS, David , KNIGHT, John , FILIPI, Adrian , HISER, Jason , HU, Wei
发明人： DAVIDSON, Jack , NGUYEN-TUONG, Anh , ROWANHILL, Jonathan , EVANS, David , KNIGHT, John , FILIPI, Adrian , HISER, Jason , HU, Wei
IPC分类号： G06F21/24
CPC分类号： G06F21/50
摘要： Software is protected by encoding the target software instructions and decoding the target instructions.
摘要翻译：通过对目标软件指令进行编码并解码目标指令来保护软件。

6. 发明申请

WO2016094840A2 SYSTEM, METHOD & COMPUTER READABLE MEDIUM FOR SOFTWARE PROTECTION VIA COMPOSABLE PROCESS-LEVEL VIRTUAL MACHINES 审中-公开
标题翻译：通过复合过程级虚拟机进行软件保护的系统，方法和计算机可读介质
公开(公告)号：WO2016094840A2
公开(公告)日：2016-06-16
申请号：PCT/US2015/065335
申请日：2015-12-11
申请人： GHOSH, Sudeep , HISER, Jason D. , DAVIDSON, Jack W.
发明人： GHOSH, Sudeep , HISER, Jason D. , DAVIDSON, Jack W.
IPC分类号： G06F17/17
CPC分类号： G06F21/53 , G06F21/54
摘要： According to some illustrative embodiments, a method for blending the data of an execution environment and the data of the protected application includes modifying the data values of the protected application using the values of the execution environment in a semantically-neutral manner or modifying the data values of the execution environment using the values of the protected application in a semantically-neutral manner. In some other embodiments, a computer implemented method for binding an execution environment and a protected application includes: selecting at least one instruction from an instruction set of the protected application; selecting at least one context from within the protected application; assigning a new meaning to the selected at least one instruction for the selected at least one context; transforming a program to use the new meaning for the selected at least one instruction and the selected at least one context; and executing the program with the execution environment that knows the newly assigned selected at least one instruction and selected at least one context. In the preferred embodiments, the execution environment comprises any combination of a process-level virtual machine, a system-level virtual machine, a hypervisor, a simulator, an emulator, or a just-in-time compilation system.
摘要翻译：根据一些说明性实施例，用于混合执行环境的数据和受保护应用的数据的方法包括使用语义中立的方式使用执行环境的值来修改受保护的应用的数据值，或修改数据值使用受保护应用程序的值以语义中立的方式执行。在一些其他实施例中，用于绑定执行环境和受保护应用的计算机实现方法包括：从受保护应用的指令集中选择至少一个指令; 从受保护的应用程序内选择至少一个上下文; 为所选择的至少一个上下文的所选择的至少一个指令分配新的含义; 转换程序以使用所选择的至少一个指令和所选择的至少一个上下文的新意义; 以及执行具有知道新分配的所选择的至少一个指令和所选择的至少一个上下文的执行环境的程序。在优选实施例中，执行环境包括过程级虚拟机，系统级虚拟机，管理程序，模拟器，仿真器或即时编译系统的任何组合。

7. 发明申请

WO2016094840A3 SYSTEM, METHOD & COMPUTER READABLE MEDIUM FOR SOFTWARE PROTECTION VIA COMPOSABLE PROCESS-LEVEL VIRTUAL MACHINES 审中-公开
标题翻译：通过复合过程级虚拟机进行软件保护的系统，方法和计算机可读介质
公开(公告)号：WO2016094840A3
公开(公告)日：2016-08-18
申请号：PCT/US2015065335
申请日：2015-12-11
申请人： GHOSH SUDEEP , HISER JASON D , DAVIDSON JACK W
发明人： GHOSH SUDEEP , HISER JASON D , DAVIDSON JACK W
IPC分类号： G06F9/44
CPC分类号： G06F21/53 , G06F21/54
摘要： According to some illustrative embodiments, a method for blending the data of an execution environment and the data of the protected application includes modifying the data values of the protected application using the values of the execution environment in a semantically-neutral manner or modifying the data values of the execution environment using the values of the protected application in a semantically-neutral manner. In some other embodiments, a computer implemented method for binding an execution environment and a protected application includes: selecting at least one instruction from an instruction set of the protected application; selecting at least one context from within the protected application; assigning a new meaning to the selected at least one instruction for the selected at least one context; transforming a program to use the new meaning for the selected at least one instruction and the selected at least one context; and executing the program with the execution environment that knows the newly assigned selected at least one instruction and selected at least one context.
摘要翻译：根据一些说明性实施例，用于混合执行环境的数据和受保护应用的数据的方法包括使用语义中立的方式使用执行环境的值来修改受保护的应用的数据值，或修改数据值使用受保护应用程序的值以语义中立的方式执行。在一些其他实施例中，用于绑定执行环境和受保护应用的计算机实现方法包括：从受保护应用的指令集中选择至少一个指令; 从受保护的应用程序内选择至少一个上下文; 为所选择的至少一个上下文的所选择的至少一个指令分配新的含义; 转换程序以使用所选择的至少一个指令和所选择的至少一个上下文的新意义; 以及执行具有知道新分配的所选择的至少一个指令和所选择的至少一个上下文的执行环境的程序。

8. 发明申请

WO2014078585A3 METHODS, SYSTEMS AND COMPUTER READABLE MEDIA FOR DETECTING COMMAND INJECTION ATTACKS 审中-公开
标题翻译：用于检测命令注入攻击的方法，系统和计算机可读介质
公开(公告)号：WO2014078585A3
公开(公告)日：2014-07-17
申请号：PCT/US2013070180
申请日：2013-11-14
申请人： UNIV VIRGINIA PATENT FOUND , NGUYEN-TUONG ANH , DAVIDSON JACK W , CO MICHELE , HISER JASON D , KNIGHT JOHN C
发明人： NGUYEN-TUONG ANH , DAVIDSON JACK W , CO MICHELE , HISER JASON D , KNIGHT JOHN C
IPC分类号： G06F11/00
CPC分类号： H04L63/105 , G06F17/241 , G06F21/51 , G06F21/554 , G06F21/57 , H04L63/1416 , H04L63/1466
摘要： Methods and systems are described for detecting command injection attacks. A positive, taint inference method includes receiving signature fragments on one hand, converting command injection instructions into command fragments on another hand, thus identifying potential attacks upon the condition that a command injection instruction includes critical untrusted parts by using signature fragments. A system detects command injection attacks using this kind of method, and remediates and rejects potential attacks.
摘要翻译：描述了用于检测命令注入攻击的方法和系统。积极的污点推理方法包括一方面接收签名片段，另一方面将命令注入指令转换成命令片段，从而通过使用签名片段识别命令注入指令包括关键不可信部分的情况下的潜在攻击。系统使用这种方法检测命令注入攻击，并修复和拒绝潜在的攻击。

9. 发明申请

WO2013130548A2 METHOD OF INSTRUCTION LOCATION RANDOMIZATION (ILR) AND RELATED SYSTEM 审中-公开
标题翻译：指示位置随机方法（ILR）及相关系统
公开(公告)号：WO2013130548A2
公开(公告)日：2013-09-06
申请号：PCT/US2013027944
申请日：2013-02-27
申请人： UNIV VIRGINIA PATENT FOUND , HISER JASON D , NGUYEN-TUONG ANH , CO MICHELE , DAVIDSON JACK W
发明人： HISER JASON D , NGUYEN-TUONG ANH , CO MICHELE , DAVIDSON JACK W
IPC分类号： G06F21/31
CPC分类号： H04L63/20 , G06F21/56 , H04L63/14 , H04L63/1466
摘要： A method and system for relocating executable instructions to arbitrary locations are disclosed. The instruction relocation may be arbitrary or random, and may operate on groups of instructions or individual instructions. Such relocation may be achieved through hardware or software, and may use a virtual machine, software dynamic translators, interpreters, or emulators. Instruction relocation may use or produce a specification governing how to relocate the desired instructions. Randomizing the location of instructions provides defenses against a variety of security attacks. The disclosed embodiments provide many advantages over other instruction relocation techniques, such as low runtime overhead, no required user interaction, applicability post-deployment, and the ability to operate on arbitrary executable programs.
摘要翻译：公开了一种用于将可执行指令重定位到任意位置的方法和系统。指令重定位可以是任意的或随机的，并且可以在指令组或单独指令上操作。这种重新定位可以通过硬件或软件实现，并且可以使用虚拟机，软件动态翻译器，解释器或仿真器。指令重新定位可以使用或产生一个规范，用于如何重定位所需的指令。随机指示指令的位置可以防范各种安全攻击。所公开的实施例提供了优于其他指令重定位技术的许多优点，例如低运行时开销，不需要的用户交互，部署后的适用性以及对任意可执行程序的操作能力。

10. 发明申请

WO2009108245A3 SYSTEM, METHOD AND COMPUTER PROGRAM PRODUCT FOR PROTECTING SOFTWARE VIA CONTINUOUS ANTI-T AMPERING AND OBFUSCATION TRANSFORMS 审中-公开
标题翻译：系统，方法和计算机程序产品，通过连续防止安培和障碍变换来保护软件
公开(公告)号：WO2009108245A3
公开(公告)日：2009-10-22
申请号：PCT/US2008087712
申请日：2008-12-19
申请人： UNIV VIRGINIA , DAVIDSON JACK W , HISER JASON D
发明人： DAVIDSON JACK W , HISER JASON D
IPC分类号： G06F11/30
CPC分类号： G06F21/562 , G06F21/10 , G06F21/14 , G06F21/52 , G06F21/53 , G06F21/57 , G06F21/572 , G06F21/602 , G06F2221/033 , G06F2221/0724 , H04L2209/16
摘要： Method, system and computer program product for applying existing anti- tampering and obfuscation techniques to virtual machine technology and offers several distinct advantages. The anti-tampering and obfuscation transforms can be applied continuously to prevent adversaries from gaining information about the program through emulation or dynamic analysis. In addition, the encryption can be used to prevent hackers from gaining information using static attacks. The use of a virtual machine also allows for low overhead execution of the obfuscated binaries as well as finer adjustment of the amount of overhead that can be tolerated. In addition, more protection can be applied to specific portions of the application that can tolerate slowdown. The incorporation of a virtual machine also makes it easy to extend the technology to integrate new developments and resistance mechanisms, leading to less development time, increased savings, and quicker deployment.
摘要翻译：将现有的防篡改和混淆技术应用于虚拟机技术的方法，系统和计算机程序产品，并提供了几个明显的优势。可以不间断地应用反篡改和混淆变换，以防止对手通过仿真或动态分析获得有关程序的信息。另外，可以使用加密来防止黑客通过静态攻击获取信息。使用虚拟机还允许混淆二进制文件的低开销执行以及可容忍的开销量的更精细的调整。此外，更多的保护可以应用于可以忍受减速的应用的特定部分。虚拟机的并入也使得将技术扩展到整合新的开发和阻力机制变得容易，从而减少了开发时间，增加了节省，并且更快的部署。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式