公开(公告)号：US08347380B1

公开(公告)日：2013-01-01

申请号：US12217071

申请日：2008-06-30

申请人： Sourabh Satish ,  Shreyans Mehta ,  Vijay Anand Seshadri

发明人： Sourabh Satish ,  Shreyans Mehta ,  Vijay Anand Seshadri

IPC分类号： G06F11/00

CPC分类号： G06F11/00 ,  G06F21/53 ,  G06F21/554 ,  G06F2221/031

摘要： A method and system for protecting users from accidentally disclosing personal information in an insecure environment. In one embodiment, the method includes monitoring I/O device input data associated with a guest operating system on a virtualization platform. The guest operating system has less privilege than a privileged operating system on the virtualization platform. The method further includes determining whether the I/O device input data corresponds to personal information of a user, and delaying or blocking the transfer of the I/O device input data to the guest operating system if the I/O device input data corresponds to the personal information of the user.

摘要翻译： 一种防止用户在不安全环境中不小心泄露个人信息的方法和系统。 在一个实施例中，该方法包括在虚拟化平台上监视与客户操作系统相关联的I / O设备输入数据。 客户机操作系统比虚拟化平台上的特权操作系统具有更少的权限。 该方法还包括：如果I / O设备输入数据对应于I / O设备输入数据对应于I / O设备输入数据对应于用户的个人信息，并且延迟或阻止将I / O设备输入数据传送到客户操作系统 用户的个人信息。

公开(公告)号：US08839374B1

公开(公告)日：2014-09-16

申请号：US13326995

申请日：2011-12-15

申请人： Shreyans Mehta ,  Sourabh Satish

发明人： Shreyans Mehta ,  Sourabh Satish

IPC分类号： G06F7/04 ,  H04L29/06

CPC分类号： H04L63/08 ,  G06F21/56 ,  H04L63/10 ,  H04L63/145

摘要： A computer-implemented method for identifying security risks in downloads may include (1) identifying a request to download a file that is subject to a security assessment, (2) determining that a first segment of the file is required for the security assessment, (3) based on determining that the first segment of the file is required for the security assessment, retrieving the first segment of the file before retrieving a second segment of the file, and (4) determining, based at least in part on the first segment, that the file includes a security risk. Various other methods, systems, and computer-readable media are also disclosed.

摘要翻译： 用于识别下载中的安全风险的计算机实现的方法可以包括（1）识别下载受安全评估的文件的请求，（2）确定文件的第一段需要用于安全评估（ 3）基于确定文件的第一段是安全评估所需要的，在检索文件的第二段之前检索文件的第一段，以及（4）至少部分地基于第一段确定 该文件包含安全风险。 还公开了各种其它方法，系统和计算机可读介质。