-
公开(公告)号:US20100106767A1
公开(公告)日:2010-04-29
申请号:US12257776
申请日:2008-10-24
申请人: Benjamin Livshits , Henricus Johannes Maria Meijer , Cedric Fournet , Jeffrey Van Gogh , Danny Van Velzen , Krishnaprasad Vikram , Abhishek Prateek
发明人: Benjamin Livshits , Henricus Johannes Maria Meijer , Cedric Fournet , Jeffrey Van Gogh , Danny Van Velzen , Krishnaprasad Vikram , Abhishek Prateek
IPC分类号: G06F15/16 , G06F15/173
CPC分类号: H04L63/08 , G06F21/52 , G06F2221/2101
摘要: A processing system for distributed multi-tier applications is provided. The system includes a server component that executes a replica of a client-side application, where a client component executes the client-side application. The client component captures events from the client-side application and transmits the events to the replica to validate the computational integrity security of the application.
摘要翻译: 提供了一种用于分布式多层应用的处理系统。 该系统包括执行客户端应用程序的副本的服务器组件,其中客户端组件执行客户端应用程序。 客户端组件从客户端应用程序捕获事件,并将事件发送到副本,以验证应用程序的计算完整性安全性。
-
公开(公告)号:US08806618B2
公开(公告)日:2014-08-12
申请号:US12059930
申请日:2008-03-31
申请人: Benjamin Livshits , Henricus Johannes Maria Meijer , Brian Beckman , Jeffrey Van Gogh , Danny Van Velzen , Dragos A. Manolescu , Bryan Sullivan
发明人: Benjamin Livshits , Henricus Johannes Maria Meijer , Brian Beckman , Jeffrey Van Gogh , Danny Van Velzen , Dragos A. Manolescu , Bryan Sullivan
IPC分类号: G06F21/00
CPC分类号: G06F21/54 , H04L63/1483 , H04L67/02
摘要: Secure distributed applications are produced by default upon construction. Mechanisms are provided to address distributed application vulnerabilities (e.g., cross-site scripting, cross-site request forgery, replay attacks. . . ) automatically. These mechanisms are provided in conjunction with a tier split component that breaks up an application for execution across multiple contexts or tiers. As a result, any application that is tier split is protected from security vulnerabilities by default without any intervention on the part of a developer.
摘要翻译: 安全的分布式应用程序在建造时默认生成。 提供了自动解决分布式应用程序漏洞(例如,跨站点脚本,跨站点请求伪造,重播攻击等)的机制。 这些机制与层次拆分组件一起提供,该组件可以跨多个上下文或层级分割应用程序以执行。 因此,任何层次拆分的应用程序默认情况下均受到安全漏洞的保护,无需开发人员进行任何干预。
-
公开(公告)号:US20090249489A1
公开(公告)日:2009-10-01
申请号:US12059930
申请日:2008-03-31
申请人: Benjamin Livshits , Henricus Johannes Maria Meijer , Brian Beckman , Jeffrey Van Gogh , Danny Van Velzen , Dragos A. Manolescu , Bryan Sullivan
发明人: Benjamin Livshits , Henricus Johannes Maria Meijer , Brian Beckman , Jeffrey Van Gogh , Danny Van Velzen , Dragos A. Manolescu , Bryan Sullivan
IPC分类号: G06F21/00
CPC分类号: G06F21/54 , H04L63/1483 , H04L67/02
摘要: Secure distributed Web applications are produced by default upon construction. Mechanisms are provided to address distributed application vulnerabilities (e.g., cross-site scripting, cross-site request forgery, replay attacks . . . automatically. These mechanisms are provided in conjunction with a tier-splitting component that breaks up an application for execution across multiple contexts or tiers. As a result, any application that is tier split is protected from security vulnerabilities by default without any intervention on the part of a developer.
摘要翻译: 安全分布式Web应用程序在构建时默认生成。 提供了解决分布式应用程序漏洞(例如,跨站点脚本,跨站点请求伪造,自动重播攻击等)的机制,这些机制与分层组件一起提供,该组件可以分解跨多个应用程序执行 因此,任何层次拆分的应用程序默认情况下均受到安全漏洞的保护,无需开发人员进行任何干预。
-
公开(公告)号:US20090228904A1
公开(公告)日:2009-09-10
申请号:US12042113
申请日:2008-03-04
申请人: Henricus Johannes Maria Meijer , John Wesley Dyer , Jeffrey Van Gogh , Danny Van Velzen , Harish Kantamneni , Dragos A. Manolescu , Brian Beckman , Benjamin Livshits
发明人: Henricus Johannes Maria Meijer , John Wesley Dyer , Jeffrey Van Gogh , Danny Van Velzen , Harish Kantamneni , Dragos A. Manolescu , Brian Beckman , Benjamin Livshits
IPC分类号: G06F9/46
CPC分类号: G06F8/41 , G06F8/30 , G06F9/4484
摘要: Asynchronous methods and calls are produced automatically as a function of a declarative indication of intent. A method annotated with an asynchronous attribute or method call including a special asynchronous function can be identified. Subsequently, an asynchronous version of an identified synchronous method or call is generated automatically. Assistance is also provided for specifying intent.
摘要翻译: 异步方法和调用是根据意图的声明性指示自动产生的。 可以识别包含特殊异步功能的异步属性或方法调用注释的方法。 随后,自动生成识别的同步方法或调用的异步版本。 还提供了帮助来指定意图。
-
公开(公告)号:US20090199159A1
公开(公告)日:2009-08-06
申请号:US12023041
申请日:2008-01-31
申请人: Henricus Johannes Maria Meijer , Brian Beckman , John Wesley Dyer , Jeffrey van Gogh , Benjamin Livshits , Dragos A. Manolescu , Danny van Velzen , Harish V. Kantamneni
发明人: Henricus Johannes Maria Meijer , Brian Beckman , John Wesley Dyer , Jeffrey van Gogh , Benjamin Livshits , Dragos A. Manolescu , Danny van Velzen , Harish V. Kantamneni
IPC分类号: G06F9/44
CPC分类号: G06F9/547
摘要: Various technologies and techniques are disclosed for enabling code to be executed on one or more execution contexts based upon declarative annotations contained in the code or other locations. An annotation associated with a region of code is located. The annotation specifies information about an execution context where the region of code should be executed. A caller proxy is generated that is responsible for calling a callee adapter to execute the region of code. The callee adapter is generated that is responsible for receiving a call from the caller proxy and for dispatching a call to the region of code at the execution context. At runtime, the caller proxy receives a request to call the region of code and sends an execution request to the callee adapter. The callee adapter receives the execution request and dispatches a call to an executable version of the region of code.
摘要翻译: 公开了各种技术和技术,用于基于代码或其他位置中包含的声明性注释来使代码能够在一个或多个执行上下文上执行。 找到与代码区域相关联的注释。 注释指定应执行代码区域的执行上下文的信息。 生成一个调用代理,负责调用被叫适配器来执行代码区域。 生成被调用的适配器,该适配器负责从呼叫者代理接收呼叫,并在执行上下文中调度到代码区域。 在运行时,调用者代理接收到调用代码区域的请求,并向被叫适配器发送执行请求。 被叫适配器接收执行请求,并调度对代码区域的可执行版本。
-
公开(公告)号:US08826242B2
公开(公告)日:2014-09-02
申请号:US11945685
申请日:2007-11-27
IPC分类号: G06F9/44 , G06F9/45 , G06F15/173
CPC分类号: H04L43/04 , G06F11/3419 , G06F11/3447 , G06F11/3476 , G06F11/3495 , G06F2201/805 , G06F2201/86 , G06F2201/865
摘要: An exemplary method includes providing an application that includes client-side code and server-side code, instrumenting the client-side code and the server-side code to generate timestamps, distributing the instrumented client-side code and the instrumented server-side code and monitoring timestamps generated during execution of the application. In such a method, where timestamps generated by the client-side code and timestamps generated by the server-side code occur along a common timeline, a developer can monitor performance of the distributed application. Other exemplary methods, systems, etc., are also disclosed.
摘要翻译: 一种示例性方法包括提供包括客户端代码和服务器端代码的应用程序,测试客户端代码和服务器端代码以生成时间戳,分发经检测的客户端代码和经检测的服务器端代码,以及 监视执行应用程序期间生成的时间戳。 在这种方法中,由客户端代码生成的时间戳和由服务器端代码生成的时间戳沿公共时间线发生,开发人员可以监视分布式应用程序的性能。 还公开了其它示例性方法,系统等。
-
公开(公告)号:US20120191803A1
公开(公告)日:2012-07-26
申请号:US13013534
申请日:2011-01-25
IPC分类号: G06F15/16
CPC分类号: G06F21/125
摘要: Various embodiments are disclosed that relate to decommissioning factored code of a program on a computing device. For example, one disclosed embodiment provides a method of operating a computing device. The method includes executing a program on the computing device, and while executing the program, identifying a remote location of a factored function via a code map, sending a call to the factored function and receiving a return response. The method further comprises, upon occurrence of a decommissioning event, receiving a copy of the factored function; and updating the code map with a location of the copy of the factored function.
摘要翻译: 公开了与计算设备上的程序的退役因子代码有关的各种实施例。 例如,一个公开的实施例提供了一种操作计算设备的方法。 该方法包括在计算设备上执行程序,并且在执行程序的同时,通过代码映射来识别因子函数的远程位置,向因子函数发送呼叫并接收返回响应。 该方法还包括:在发生退役事件时,接收因子函数的副本; 并使用因子函数的副本的位置来更新代码映射。
-
公开(公告)号:US20100153928A1
公开(公告)日:2010-06-17
申请号:US12335799
申请日:2008-12-16
IPC分类号: G06F9/44 , G06F15/177
CPC分类号: G06F11/3461 , G06F11/3495 , H04L41/0893 , H04L41/145 , H04L41/50 , H04L43/0852 , H04L43/50
摘要: A network service runtime module executing on a processor is configured to accept a directed acyclic service graph representing elements of a network service application. During execution of the service graph, runtime events are stored. The service graph may by optimized by generating alternate service graphs, and simulating performance of the alternate service graphs in a simulator using the stored runtime events. A hill climber algorithm may be used in conjunction with the simulator to vary alternate service graphs and determine which alternate service graphs provide the greatest utility. Once determined, an alternate service graph with the greatest utility may be loaded into the network service runtime module for execution.
摘要翻译: 在处理器上执行的网络服务运行时模块被配置为接受表示网络服务应用的元素的有向非循环服务图。 在执行服务图时,会运行事件。 服务图可以通过生成备用服务图进行优化,并使用存储的运行时事件模拟模拟器中的备用服务图的性能。 爬山者算法可以与模拟器一起使用以改变备用服务图,并确定哪些替代服务图提供最大的效用。 一旦确定,具有最大效用的备用服务图可以被加载到网络服务运行时模块中以供执行。
-
公开(公告)号:US20090083714A1
公开(公告)日:2009-03-26
申请号:US11862075
申请日:2007-09-26
IPC分类号: G06F9/44
CPC分类号: G06F8/658
摘要: Computer-executable instructions comprising some or all of a program can be delivered to a client for execution on a real-time basis such that the client receives anew the computer-executable instructions for each new execution of the program. Such an environment enables instrumentation instructions to be inserted into the computer-executable instructions after a request and prior to the delivery of the computer-executable instructions. The inserted instrumentation instructions can be spread across multiple deliveries of the same computer-executable instructions, and they can be modified to account for information received from previously inserted instrumentation instructions. The instrumentation instructions can be inserted as part of the server process, the client process, or as part of a proxy server that can be used at the discretion of the program developer.
-
公开(公告)号:US09038185B2
公开(公告)日:2015-05-19
申请号:US13339322
申请日:2011-12-28
CPC分类号: G06F11/3612 , G06F11/3688 , G06F21/566
摘要: Techniques for execution of multiple execution paths are described. In one or more embodiments, an execution of a portion of executable code is conditioned upon a particular environment-specific value. For example, the execution of the executable code can cause one type of output if the value of the variable equals a particular value, and can cause a different type of output if the value of the variable equals a different value. Techniques discussed herein can enable the executable code to be executed such that multiple outputs are produced, e.g., by executing the code according to the different values for the variable. In implementations, the multiple outputs can be analyzed for various attributes, such as presence of malware, implementation and coding errors, and so on.
摘要翻译: 描述用于执行多个执行路径的技术。 在一个或多个实施例中,可执行代码的一部分的执行受特定环境特定值的限制。 例如,如果变量的值等于特定值,则可执行代码的执行可能导致一种类型的输出,如果变量的值等于不同的值,则可能导致不同类型的输出。 这里讨论的技术可以使得执行可执行代码,使得例如通过根据变量的不同值执行代码来产生多个输出。 在实现中,可以分析多个输出的各种属性,例如恶意软件的存在,实现和编码错误等。
-
-
-
-
-
-
-
-
-