Kernel-based detection of target application functionality using virtual address mapping

    公开(公告)号:US10380342B2

    公开(公告)日:2019-08-13

    申请号:US15245037

    申请日:2016-08-23

    Inventor: Subrato Kumar De

    Abstract: Systems, methods, and computer programs are disclosed for detecting high-level functionality of an application executing on a computing device. One method comprises storing, in a secure memory on a computing device, a virtual address mapping table for an application. The virtual address mapping table comprises a plurality of virtual addresses in the application binary code mapped to corresponding target application functionalities. The application is registered with a high-level operating system (HLOS). During execution of the application binary code, the HLOS detects when one or more of the virtual addresses corresponding to the target application functionalities are executed based on the virtual address mapping table.

    Updating virtual memory addresses of target application functionalities for an updated version of application binary code

    公开(公告)号:US10289847B2

    公开(公告)日:2019-05-14

    申请号:US15245041

    申请日:2016-08-23

    Inventor: Subrato Kumar De

    Abstract: Systems, methods, and computer programs are disclosed for updating virtual memory addresses of target application functionalities for an updated version of application binary code. The method comprises storing a virtual address mapping table associated with application binary code registered with a high-level operating system. The virtual address mapping table comprises a plurality of virtual addresses mapped to corresponding target application functionalities in the application binary code. In response to receiving an updated version of the application binary code, a pseudo binary code template is selected, which is associated with one or more of the plurality of virtual addresses in the virtual address mapping table. The pseudo binary code template is matched to binary instructions in the updated version of the application binary code. The new virtual addresses corresponding to the matching binary instructions are determined. The virtual address mapping table is updated with the new virtual addresses.

    SYSTEMS AND METHODS FOR SELECTION OF SPECIALIZED FUNCTIONS IN DYNAMICALLY-TYPED LANGUAGES
    13.
    发明申请
    SYSTEMS AND METHODS FOR SELECTION OF SPECIALIZED FUNCTIONS IN DYNAMICALLY-TYPED LANGUAGES 审中-公开
    用于选择动态语言中特殊功能的系统和方法

    公开(公告)号:US20140173556A1

    公开(公告)日:2014-06-19

    申请号:US14083264

    申请日:2013-11-18

    CPC classification number: G06F8/31 G06F9/45529

    Abstract: Systems, methods, and devices for executing a function in a dynamically-typed language are described herein. In one aspect, a method includes generating a function selection decision tree based on one or more specializations of a generic function and one or more function inputs via an electronic device. The method further includes selecting one of the specializations or the generic function based on an input type of at least one function input via the electronic device. The method further includes calling the selected specialization or generic function via the electronic device. Another aspect of the subject matter described in the disclosure provides a method of executing a function in a prototype-based dynamically-typed language. The method includes maintaining a list of calls to one or more specializations of the function via the electronic device. The method further includes creating or destroying a specialization of the function via the electronic device. The method further includes updating calls to the created or destroyed specialization via the electronic device. Advantageously in certain embodiments, selection logic overhead can be reduced using criteria that can utilize different weightages for one or more inputs based on heuristics or runtime information.

    Abstract translation: 这里描述了用于以动态类型语言执行功能的系统,方法和设备。 一方面,一种方法包括基于通用功能的一个或多个专业化以及经由电子设备的一个或多个功能输入来生成功能选择决策树。 该方法还包括基于经由电子设备的至少一个功能输入的输入类型来选择专业化或通用功能之一。 该方法还包括通过电子设备调用所选择的专门化或通用功能。 在本公开中描述的主题的另一方面提供了一种在基于原型的动态类型语言中执行功能的方法。 该方法包括通过电子设备维护对功能的一个或多个专业化的呼叫列表。 该方法还包括通过电子设备创建或破坏功能的专业化。 该方法还包括通过电子设备更新对创建或销毁的专业化的呼叫。 有利地,在某些实施例中,可以使用可以基于启发式或运行时信息为一个或多个输入利用不同权重的标准来减少选择逻辑开销。

    Systems and methods for multi-instance learning-based classification for streaming inputs

    公开(公告)号:US11960975B2

    公开(公告)日:2024-04-16

    申请号:US15447397

    申请日:2017-03-02

    CPC classification number: G06N20/00 G06F21/56

    Abstract: A method for multi-instance learning (MIL)-based classification of a streaming input is described. The method includes running a first biased MIL model using extracted features from a subset of instances received in the streaming input to obtain a first classification result. The method also includes running a second biased MIL model using the extracted features to obtain a second classification result. The first biased MIL model is biased opposite the second biased MIL model. The method further includes classifying the streaming input based on the classification results of the first biased MIL model and the second biased MIL model.

    Methods and systems for detecting and responding to paging channel attacks

    公开(公告)号:US11265700B2

    公开(公告)日:2022-03-01

    申请号:US16546582

    申请日:2019-08-21

    Abstract: Methods for countering a shared paging channel hijack attack. In an example embodiment, a wireless device may monitor the shared paging channel during a paging occasion in a DRX cycle to detect a first IMSI-based paging message in the paging occasion, and continue monitoring for IMSI-based paging in subsequent radio subframes in the paging frame and radio subframes in subsequent radio frames within the DRX cycle to determine whether there are indications of a paging channel hijack attack. In an example embodiment, this monitoring may be to determine whether one or more subframes that are not the paging occasion receive IMSI-based paging messages, in response to which a threat probability may be increased. The wireless device may perform an operation (e.g., an actuation operation such as disabling monitoring of, and preventing connection attempts to, the base station, etc.) to protect against a shared paging channel hijack attack.

    Kernel-based detection of target application functionality using offset-based virtual address mapping

    公开(公告)号:US10360383B2

    公开(公告)日:2019-07-23

    申请号:US15465515

    申请日:2017-03-21

    Abstract: Systems and methods are disclosed for detecting high-level functionality of an application executing on a computing device. One method includes storing, in a secure memory, an application-specific virtual address mapping table for an application. The application-specific virtual address mapping table comprises a plurality of virtual address offsets in the application binary code mapped to corresponding target application functionalities. In response to launching the application, a process-specific virtual address mapping table is generated for an instance of an application process to be executed. The process-specific virtual address mapping table defines actual virtual addresses corresponding to the target application functionalities using the virtual address offsets in the application-specific virtual address mapping table. During execution of the application code, the method detects when one or more of the actual virtual addresses corresponding to the target application functionalities are executed based on the process-specific virtual address mapping table.

    Dynamic mapping of applications on NVRAM/DRAM hybrid memory

    公开(公告)号:US10338837B1

    公开(公告)日:2019-07-02

    申请号:US15946600

    申请日:2018-04-05

    Abstract: This disclosure relates to allocating memory resources of a computing device comprising non-volatile random access memory (NVRAM) and dynamic random access memory (DRAM). An exemplary method is performed for every independently executable component of an application and includes determining attributes of the component. The method also includes associating the component with a memory profile of a plurality of memory profiles based on the attributes, wherein each memory profile of the plurality of memory profiles specifies a number of banks of the NVRAM and a number of banks of the DRAM. The method also includes causing the computing device to generate an assignment of the component to banks of the NVRAM and DRAM based on the memory profile associated with the component so the computing device can execute the component using the banks of the NVRAM and DRAM based on the assignment.

    SYSTEMS AND METHODS FOR MULTI-INSTANCE LEARNING-BASED CLASSIFICATION FOR STREAMING INPUTS

    公开(公告)号:US20180046941A1

    公开(公告)日:2018-02-15

    申请号:US15447397

    申请日:2017-03-02

    CPC classification number: G06N20/00 G06F21/56

    Abstract: A method for multi-instance learning (MIL)-based classification of a streaming input is described. The method includes running a first biased MIL model using extracted features from a subset of instances received in the streaming input to obtain a first classification result. The method also includes running a second biased MIL model using the extracted features to obtain a second classification result. The first biased MIL model is biased opposite the second biased MIL model. The method further includes classifying the streaming input based on the classification results of the first biased MIL model and the second biased MIL model.

Patent Agency Ranking