-
公开(公告)号：US20240054065A1
公开(公告)日：2024-02-15
申请号：US17887927
申请日：2022-08-15
Applicant: Arm Limited
Inventor： Brendan James Moran , Hugo John Martin Vincent , Michael Bartling
CPC classification number: G06F11/3495 , G06K9/6262
Abstract: A behavioral sensor for creating consumable events can include: a feature extractor coupled to receive an event stream of events performed by a circuit, wherein the feature extractor identifies features of a particular event of the event stream and associates the particular event with a time; and a classifier coupled to receive the features of the particular event from the feature extractor, wherein the classifier classifies the particular event into a classified event associated with the time using predefined categories based on the received features of the particular event; whereby the classified event and subsequent classified events extracted from the event stream within a time frame are appended in a time series forming the consumable events.
-
公开(公告)号：US20250028838A1
公开(公告)日：2025-01-23
申请号：US18223828
申请日：2023-07-19
Applicant: Arm Limited
Inventor： Michael Bartling , Matthias Lothar Boettcher , Brendan James Moran
IPC: G06F21/57
Abstract: A method is provided that includes receiving a computer program comprising regions of code, each region of code including at least one function, pruning a search space of the received computer program by applying a high-level model recognizing potential software vulnerabilities to the computer program to determine a region of the code of the regions of code that includes a potential software vulnerability, performing a localized static analysis on the region of the code that include the potential software vulnerability to determine a local condition that causes the potential software vulnerability to be expressed in the computer program, and generating a report that includes the region of the code that includes the potential software vulnerability including a location of the region of the code within the computer program and the local condition that causes the potential software vulnerability to be expressed in the computer program.
-
公开(公告)号：US20240354410A1
公开(公告)日：2024-10-24
申请号：US18303144
申请日：2023-04-19
Applicant: Arm Limited
Inventor： Brendan James Moran , Michael Bartling
CPC classification number: G06F21/566 , H04L63/1416
Abstract: A method of malware detection includes performing, by a second device of a plurality of devices on a network, a fuzzy matching between a second sequence of events occurring at the second device and a first sequence of captured events that occurred at a first device of the plurality of devices on the network; determining, by the second device, that a result of the fuzzy matching reaches a first threshold; and in response to determining that the result of the fuzzy matching reaches the first threshold, initiating a detailed instrumentation at the second device. The method can further include determining, by the second device, that a first condition is satisfied; and in response to determining that the first condition is satisfied: generating a second malware behavior package including information from the detailed instrumentation; and communicating the second malware behavior package over the network.
-
公开(公告)号：US11914497B2
公开(公告)日：2024-02-27
申请号：US17709683
申请日：2022-03-31
Applicant: Arm Limited
Inventor： Michael Bartling
CPC classification number: G06F11/3608 , G06F9/45516 , G06F11/3409 , G06F11/3616
Abstract: A data processing apparatus is provided that includes storage circuitry to store a plurality of interconnected instructions. Analysis circuitry analyses the instructions to determine a degree of uniqueness of profile measurements of a control flow path fragments within the instructions.
-
公开(公告)号：US20250141433A1
公开(公告)日：2025-05-01
申请号：US18497733
申请日：2023-10-30
Applicant: Arm Limited
Inventor： Michael Bartling , Brendan James Moran
IPC: H03H21/00
Abstract: Various implementations described herein are directed to a device having a write circuit that provides data for storage. The device may include a memory circuit that stores the data in leaky bitcells with capacitive elements that gradually discharge over a pre-determined period of time. The device may include a read circuit that enables the leaky bitcells to operate as one or more memory storage elements. The device may include a query circuit that identifies matches between a query data and output data provided by the read circuit.
-
Patent Agency Ranking
公开(公告)号：US20240394361A1
公开(公告)日：2024-11-28
申请号：US18200724
申请日：2023-05-23
Applicant: Arm Limited
Inventor： Brendan James Moran , Michael Bartling
Abstract: A method is provided that includes receiving a source code block of a source code and a sensor configuration associated with the source code block, performing instrumentation on the source code block at least two times to generate corresponding at least two differently instrumented code blocks from the source code block, creating a corresponding model of the sensor configuration for each differently instrumented code block, and receiving a request for an instrumented variant of the source code block for execution by a processing element and deploying the instrumented variant of the source code block to the processing element. The instrumented variant of the source code block comprises one of the at least two differently instrumented code blocks from the source code block.
-
公开(公告)号：US11385996B1
公开(公告)日：2022-07-12
申请号：US17319241
申请日：2021-05-13
Applicant: Arm Limited
Inventor： Michael Bartling
Abstract: Techniques, supported by corresponding apparatuses and methods, are disclosed for monitoring execution of software and generating path signatures which are characteristic of the behaviour of the software. Multiple approximate nearest neighbour searching hash tables are generated in dependence on such path signatures. Observed path signatures are also compared against the previously generated content of these runtime multiple approximate nearest neighbour searching hash tables and a behavioural classification is determined in dependence on hash collision-based similarity between the observed path signature and the content of the multiple approximate nearest neighbour searching hash tables.
-
公开(公告)号：US20240354404A1
公开(公告)日：2024-10-24
申请号：US18302354
申请日：2023-04-18
Applicant: Arm Limited
Inventor： Dominic Phillip Mulligan , Brendan James Moran , Michael Bartling , Matthias Lothar Boettcher
CPC classification number: G06F21/554 , G06F21/53 , G06F21/552
Abstract: A method to mitigate an attack initiated by a malicious actor by migration of the attacked process is provided. The method includes monitoring a process being executed from a first computing location on a computing device for a trigger indicating a potential attack and detecting the trigger indicating the potential attack. Responsive to detecting the trigger indicating the potential attack, initiating an attack countermeasure by migrating the process to execute in a second computing location isolated from the first computing location, thereby breaking access to information at the first computing location. A computing device is also provided that includes a processor, a memory, and instructions stored on the memory that when executed by the processor direct the computing device to monitor a process being executed from a first computing location on the computing device for a trigger indicating a potential attack and detect the trigger indicating the potential attack.
-
公开(公告)号：US20240134978A1
公开(公告)日：2024-04-25
申请号：US17972986
申请日：2022-10-24
Applicant: Arm Limited
Inventor： Archie David Licudi , Michael Bartling
CPC classification number: G06F21/566 , G06F9/542 , G06F2221/034
Abstract: A method and apparatus to classify processor events is provided. The apparatus includes a reference generator, a warping unit, a correlation unit and a detector. The reference generator provides a self-reference for an event vector stream based on a history of the event vector stream and the warping unit dynamically aligns the event vector stream with the self-reference to generate a warped event vector stream. The correlation unit determines a window-by-window correlation of event vectors of the warped event vector stream, and the detector passes a window of event vectors of the warped event vector stream to a behavioral classifier when the window-by-window correlation achieves a threshold value. The behavioral classifier may use machine learning. A sample reservoir may be used to store dynamically selected event vectors of the event vector stream that are used, at least in part, to generate the self-reference.
-
10.发明申请公开(公告)号：US20220382226A1
公开(公告)日：2022-12-01
申请号：US17335992
申请日：2021-06-01
Applicant: Arm Limited
Inventor： Michael Bartling , Brendan James Moran
IPC: G05B13/04 , G06N5/00 , G06F16/901
Abstract: Subject matter disclosed herein may relate to time-series mixing for adaptive system training and may relate more particularly to causality-preserving time series mixing for adaptive system training.
-
-
-
-
-
-
-
-
-
Search Results
16
records
(took 0.012 seconds)
