专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2017218159A1 METHODS AND SYSTEMS FOR CONTEXT BASED ANOMALY MONITORING 审中-公开
标题翻译：基于上下文的异常监测方法和系统
公开(公告)号：WO2017218159A1
公开(公告)日：2017-12-21
申请号：PCT/US2017/034496
申请日：2017-05-25
申请人： QUALCOMM INCORPORATED
发明人： AHMADZADEH, Seyed Ali , DAS, Saumitra Mohan , GUPTA, Rajarshi , KRISHNAMURTHI, Govindarajan
IPC分类号： H04W4/04
摘要： Various embodiments include methods, and computing devices configured to implement the methods, for anomaly monitoring using context-based sensor output correlation. A computing device may obtain output of a first sensor and may determine that an anomaly is likely to occur based on the obtained output of the first sensor. The computing device may transmit a message indicating that the anomaly is likely to occur, causing receiving computing devices to begin logging output of sensors of the receiving computing devices. The computing device may determine whether the anomaly did occur. If the anomaly did occur, the computing device may transmit a sensor output request. Nearby computing devices may receive this sensor output request and may transmit collected sensor data to the first computing device. The first computing device may receive the sensor output collected by the various receiving devices and may correlate the first sensor output with the received sensor output.
摘要翻译：各种实施例包括被配置为实施所述方法的方法和计算设备，用于使用基于上下文的传感器输出相关性进行异常监测。计算设备可以获得第一传感器的输出并且可以基于获得的第一传感器的输出确定可能发生异常。计算设备可以传输指示异常可能发生的消息，使得接收计算设备开始记录接收计算设备的传感器的输出。计算设备可以确定异常是否确实发生。如果异常确实发生，则计算设备可以发送传感器输出请求。附近的计算设备可以接收该传感器输出请求并且可以将收集的传感器数据传输到第一计算设备。第一计算设备可以接收由各种接收设备收集的传感器输出，并且可以使第一传感器输出与接收到的传感器输出相关。

2. 发明申请

WO2017083043A1 DYNAMIC HONEYPOT SYSTEM 审中-公开
标题翻译：动态HONEYPOT系统
公开(公告)号：WO2017083043A1
公开(公告)日：2017-05-18
申请号：PCT/US2016/056438
申请日：2016-10-11
申请人： QUALCOMM INCORPORATED
发明人： AHMADZADEH, Seyed Ali , ISLAM, Nayeem , CHRISTODORESCU, Mihai , GUPTA, Rajarshi , DAS, Saumitra Mohan
IPC分类号： H04L29/06 , G06F21/56 , G06F21/55 , G06F21/57
CPC分类号： H04L63/1416 , G06F21/552 , G06F21/554 , G06F21/566 , G06F21/577 , G06F2221/033 , H04L63/1425 , H04L63/1433 , H04L63/1491
摘要： Various embodiments include a honeypot system configured to trigger malicious activities by malicious applications using a behavioral analysis algorithm and dynamic resource provisioning. A method performed by a processor of a computing device, which may be a mobile computing device, may include determining whether or not a target application currently executing on the computing device is potentially malicious based, at least in part, on the analysis, predicting a triggering condition of the target application in response to determining the target application is potentially malicious, provisioning one or more resources based, at least in part, on the predicted triggering condition, monitoring activities of the target application corresponding to the provisioned one or more resources, and determining whether or not the target application is a malicious application based, at least in part, on the monitored activities. The resources may be device components (e.g., network interface(s), sensor(s), etc.) and/or data (e.g., files, etc.).
摘要翻译：各种实施例包括配置成使用行为分析算法和动态资源供应由恶意应用触发恶意活动的蜜罐系统。由计算设备的处理器（其可以是移动计算设备）执行的方法可以包括：至少部分地基于分析来确定当前在计算设备上执行的目标应用程序是否潜在恶意，预测响应于确定目标应用程序可能是恶意的，触发目标应用程序的条件;至少部分地基于所预测的触发条件来提供一个或多个资源;监视与所提供的一个或多个资源相对应的目标应用程序的活动; 以及至少部分地基于所监视的活动来确定目标应用程序是否是恶意应用程序。资源可以是设备组件（例如，网络接口，传感器等）和/或数据（例如，文件等）。

3. 发明申请

WO2016182668A1 METHODS AND SYSTEMS FOR BEHAVIOR-SPECIFIC ACTUATION FOR REAL-TIME WHITELISTING 审中-公开
标题翻译：用于实时白名单的行为特定启动的方法和系统
公开(公告)号：WO2016182668A1
公开(公告)日：2016-11-17
申请号：PCT/US2016/027462
申请日：2016-04-14
申请人： QUALCOMM INCORPORATED
发明人： SRIDHARA, Vinay , CHEN, Yin , GUPTA, Rajarshi
IPC分类号： G06F21/56
CPC分类号： H04L63/1425 , G06F3/0484 , G06F21/566 , G06F2221/033 , G06N99/005 , H04L63/101
摘要： Various embodiments include methods of evaluating device behaviors in a computing device and enabling white listing of particular behaviors. Various embodiments may include monitoring activities of a software application operating on the computing device, and generating a behavior vector information structure that characterizes a first monitored activity of the software application. The behavior vector information structure may be applied to a machine learning classifier model to generate analysis results. The analysis results may be used to classify the first monitored activity of the software application as one of benign, suspicious, and non-benign. A prompt may be displayed to the user that requests that the user select whether to whitelist the software application in response to classifying the first monitored activity of the software application as suspicious or non-benign. The first monitored activity may be added to a whitelist of device behaviors in response to receiving a user input.
摘要翻译：各种实施例包括评估计算设备中的设备行为并实现特定行为的白名单的方法。各种实施例可以包括在计算设备上操作的软件应用程序的监视活动，以及生成表征软件应用程序的第一监视活动的行为向量信息结构。行为矢量信息结构可以应用于机器学习分类器模型，以生成分析结果。分析结果可用于将软件应用程序的第一个监视活动分类为良性，可疑和非良性之一。可以向用户显示提示，要求用户选择是否将软件应用程序的第一被监视活动分类为可疑或非良性，以便将软件应用程序列入白名单。响应于接收到用户输入，第一个被监视的活动可以被添加到设备行为的白名单中。

4. 发明申请

WO2016178789A1 METHODS AND SYSTEMS FOR USING CAUSAL ANALYSIS FOR BOOSTED DECISION STUMPS TO IDENTIFY AND RESPOND TO NON-BENIGN BEHAVIORS 审中-公开
标题翻译：使用基于分析的分析方法和系统来识别和应对非竞争行为
公开(公告)号：WO2016178789A1
公开(公告)日：2016-11-10
申请号：PCT/US2016/026328
申请日：2016-04-07
申请人： QUALCOMM INCORPORATED
发明人： SRIDHARA, Vinay , CHEN, Yin , GUPTA, Rajarshi
IPC分类号： G06F21/56
CPC分类号： H04L63/1425 , G06F21/566
摘要： A computing device processor may be configured with processor-executable instructions to implement methods of detecting and responding non-benign behaviors of the computing device. The processor may be configured to monitor device behaviors to collect behavior information, generate a behavior vector information structure based on the collected behavior information, apply the behavior vector information structure to a classifier model to generate analysis results, use the analysis results to classify a behavior of the device, use the analysis results to determine the features evaluated by the classifier model that contributed most to the classification of the behavior, and select the top "n" (e.g., 3) features that contributed most to the classification of the behavior. The computing device may display the selected features on an electronic display of the computing device.
摘要翻译：计算设备处理器可以配置有处理器可执行指令，以实现检测和响应计算设备的非良性行为的方法。处理器可以被配置为监视设备行为以收集行为信息，基于收集的行为信息生成行为向量信息结构，将行为向量信息结构应用于分类器模型以生成分析结果，使用分析结果对行为进行分类的设备，使用分析结果来确定由分类器模型评估的功能，对行为的分类最有贡献，并选择对行为分类最有贡献的顶部“n”（例如，3）特征。计算设备可以在计算设备的电子显示器上显示所选择的特征。

5. 发明申请

WO2016130262A1 ON-DEVICE BEHAVIORAL ANALYSIS TO DETECT MALFUNCTION DUE TO RF INTERFERENCE 审中-公开
标题翻译：用于检测RF干扰功能的设备行为分析
公开(公告)号：WO2016130262A1
公开(公告)日：2016-08-18
申请号：PCT/US2016/013168
申请日：2016-01-13
申请人： QUALCOMM INCORPORATED
发明人： SALAJEGHEH, Mastooreh , KRISHNAMURTHI, Govindarajan , GUPTA, Rajarshi , CHRISTODORESCU, Mihai , SRIDHARA, Vinay , HUGHES, Patrick
IPC分类号： G06F1/32 , H04B17/345 , H04B15/00
CPC分类号： H04W24/08 , G06F1/3206 , H04B15/00 , H04B17/17 , H04B17/27 , H04B17/345 , H04B17/3911 , H04W4/02 , H04W64/003
摘要： Systems, methods, and devices of the various aspects enable detecting a malfunction caused by radio frequency (RF) interference. A computing device processor may identify a location of the computing device based on a plurality of real-time data inputs received by the computing device. The processor may characterize an RF environment of the computing device based on the identified location and the plurality of real-time data inputs. The processor may determine at least one RF emissions threshold based on the characterization of the RF environment. The processor may compare the characterization of the RF environment to the at least one RF emissions threshold, and may perform an action in response to determining that the characterization of the RF environment exceeds the at least one RF emissions threshold.
摘要翻译：各方面的系统，方法和装置能够检测由射频（RF）干扰引起的故障。计算设备处理器可以基于由计算设备接收的多个实时数据输入来识别计算设备的位置。处理器可以基于所识别的位置和多个实时数据输入来表征计算设备的RF环境。处理器可以基于RF环境的表征来确定至少一个RF发射阈值。处理器可以将RF环境的特征与至少一个RF发射阈值进行比较，并且可以响应于确定RF环境的表征超过至少一个RF辐射阈值来执行动作。

6. 发明申请

WO2016057111A1 METHODS AND SYSTEMS FOR BEHAVIORAL ANALYSIS OF MOBILE DEVICE BEHAVIORS BASED ON USER PERSONA INFORMATION 审中-公开
标题翻译：基于用户个人信息的移动设备行为的行为分析方法与系统
公开(公告)号：WO2016057111A1
公开(公告)日：2016-04-14
申请号：PCT/US2015/044578
申请日：2015-08-11
申请人： QUALCOMM INCORPORATED
发明人： SALAJEGHEH, Mastooreh , SRIDHARA, Vinay , CHEN, Yin , GUPTA, Rajarshi
IPC分类号： G06F21/31 , H04L29/06 , G06F21/55
CPC分类号： G06F21/577 , G06F11/3024 , G06F11/3438 , G06F21/316 , G06F21/552 , H04L63/1425 , H04L63/145
摘要： A computing device processor may be configured with processor-executable instructions to implement methods of using behavioral analysis and machine learning techniques to identify, prevent, correct, or otherwise respond to malicious or performance-degrading behaviors of the computing device. As part of these operations, the processor may generate user-persona information that characterizes the user based on that user's activities, preferences, age, occupation, habits, moods, emotional states, personality, device usage patterns, etc. The processor may use the user-persona information to dynamically determine the number of device features that are monitored or evaluated in the computing device, to identify the device features that are most relevant to determining whether the device behavior is not consistent with a pattern of ordinary usage of the computing device by the user, and to better identify or respond to non-benign behaviors of the computing device.
摘要翻译：计算设备处理器可以配置有处理器可执行指令，以实现使用行为分析和机器学习技术来识别，防止，纠正或以其他方式响应计算设备的恶意或性能降级的行为的方法。作为这些操作的一部分，处理器可以基于该用户的活动，偏好，年龄，职业，习惯，情绪，情绪状态，个性，设备使用模式等来生成表征用户的用户角色信息。处理器可以使用用户角色信息以动态地确定在计算设备中被监视或评估的设备特征的数量，以识别与确定设备行为是否与计算设备的普通使用模式最相关的设备特征并且更好地识别或响应计算设备的非良性行为。

7. 发明申请

WO2014126673A1 MEASUREMENTS FOR INDOOR NAVIGATION 审中-公开
标题翻译：室内导航测量
公开(公告)号：WO2014126673A1
公开(公告)日：2014-08-21
申请号：PCT/US2014/011793
申请日：2014-01-16
申请人： QUALCOMM INCORPORATED
发明人： SRIDHARA, Vinay , GUPTA, Rajarshi , ZHANG, Gengsheng
IPC分类号： G01C21/20 , G01S5/02 , H04W64/00 , G01S5/14 , G01S11/06
CPC分类号： H04W4/02 , G01C21/206 , G01S5/0257 , G01S5/0268 , G01S5/14 , G01S11/06 , H04W64/00
摘要： A method of obtaining and using access point signal information includes: receiving signals at a mobile device from a first set of access points during a passive measurement; and performing a first active measurement at the mobile device for the first set of the access points, including: sending at least one first communication each sent toward a respective one of the access points of the first set; and receiving at least one second communication each corresponding to, and responsive to, one of the at least one first communication and received from a corresponding one of the access points of the first set; where the passive measurement and the first active measurement is each performed repeatedly with the first set of the access points being reestablished at each repeat performance of the passive measurement, and with the passive measurement being performed less often than the first active measurement.
摘要翻译：一种获取和使用接入点信号信息的方法包括：在被动测量期间从移动设备接收来自第一组接入点的信号; 以及针对所述第一组接入点在所述移动设备处执行第一主动测量，包括：发送至少一个第一通信，每个至少一个第一通信被发送到所述第一组的接入点中的相应一个; 以及接收至少一个第二通信，每个对应于并且响应于所述至少一个第一通信中的一个并且从所述第一组的所述接入点中的相应一个接收点接收; 其中被动测量和第一主动测量被重复执行，在被动测量的每个重复执行时，第一组接入点被重新建立，并且被动测量的执行频率低于第一有源测量值。

8. 发明申请

WO2014120409A1 LOCATION BASED PROCESS-MONITORING 审中-公开
标题翻译：基于位置的过程监控
公开(公告)号：WO2014120409A1
公开(公告)日：2014-08-07
申请号：PCT/US2014/010947
申请日：2014-01-10
申请人： QUALCOMM INCORPORATED
发明人： GUPTA, Rajarshi , DAS, Saumitra Mohan , NAGUIB, Ayman Fawzy
IPC分类号： G06F21/50 , H04M1/725
CPC分类号： G06F21/552 , G06F21/52 , G06F21/577 , G06F2221/034 , H04L63/107 , H04L63/1416 , H04L63/1433 , H04M1/72572 , H04W4/02 , H04W12/12
摘要： Disclosed are systems, apparatus, devices, methods, computer program products, and other implementations, including a method that includes determining location of a device, and controlling monitoring of behavior of one or more processes executing on the device based on the determined location of the device to identify potential one or more security-risky processes from the monitored one or more executing processes. In some embodiments, controlling the monitoring of the behavior of the one or more processes may include one or more of, for example, adjusting frequency of the monitoring of the one or more processes based on the determined location of the device, adjusting level of detail obtained for the monitored behavior of the one or more processes based on the determined location of the device, and/or adjusting features being observed for the monitored one or more processes based on the determined location of the device.
摘要翻译：公开了系统，装置，设备，方法，计算机程序产品和其他实施方式，包括包括确定设备的位置的方法，以及基于所确定的位置来控制在设备上执行的一个或多个进程的行为的监视从所监视的一个或多个执行过程中识别潜在的一个或多个安全风险过程。在一些实施例中，控制对一个或多个进程的行为的监视可以包括例如基于所确定的设备位置来调整一个或多个进程的监视的频率中的一个或多个，调整详细程度基于所确定的设备的位置来监视所述一个或多个进程的监视行为，和/或基于所确定的设备的位置来调整针对所监视的一个或多个进程的特征。

9. 发明申请

WO2014107438A3 METHODS AND SYSTEMS OF DYNAMICALLY GENERATING AND USING DEVICE-SPECIFIC AND DEVICE-STATE-SPECIFIC CLASSIFIER MODELS FOR THE EFFICIENT CLASSIFICATION OF MOBILE DEVICE BEHAVIORS 审中-公开
公开(公告)号：WO2014107438A3
公开(公告)日：2014-07-10
申请号：PCT/US2013/078350
申请日：2013-12-30
申请人： QUALCOMM INCORPORATED
发明人： SRIDHARA, Vinay , GUPTA, Rajarshi , FAWAZ, Kassem
IPC分类号： G06N5/04
摘要： The various aspects provide a mobile device and methods implemented on the mobile device for modifying behavior models to account for device-specific or device-state-specific features. In the various aspects, a behavior analyzer module may leverage a full feature set of behavior models (i.e. a large classifier model) received from a network server to create lean classifier models for use in monitoring for malicious behavior on the mobile device, and the behavior analyzer module may dynamically modify these lean classifier models to include features specific to the mobile device and/or the mobile device's current configuration. Thus, the various aspects may enhance overall security for a particular mobile device by taking the mobile device and its current configuration into account and may improve overall performance by monitoring only features that are relevant to the mobile device.

10. 发明申请

WO2013173043A3 COMMUNICATING BEHAVIOR INFORMATION IN A MOBILE COMPUTING DEVICE 审中-公开
公开(公告)号：WO2013173043A3
公开(公告)日：2013-11-21
申请号：PCT/US2013/038399
申请日：2013-04-26
申请人： QUALCOMM INCORPORATED
发明人： GUPTA, Rajarshi , HALAMBI, Soorgoli, Ashok , GATHALA, Sudha, A. , SRIDHARA, Vinay
IPC分类号： H04W24/00
摘要： Methods, systems and devices for communicating behavior analysis information using an application programming interface (API) may include receiving data/behavior models from one or more third-party network servers in a client module of a mobile device and communicating the information to a behavior observation and analysis system via a behavior API. The third-party servers may be maintained by one or more partner companies that have domain expertise in a particular area or technology that is relevant for identifying, analyzing, classifying, and/or reacting to mobile device behaviors, but that do not have access to (or knowledge of) the various mobile device sub-systems, interfaces, configurations, modules, processes, drivers, and/or hardware systems required to generate effective data/behavior models suitable for use by the mobile device. The behavior API and/or client modules allow the third-party server to quickly and efficiently access the most relevant and important information on the mobile device.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式