利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

46 条记录 (耗时 0.036 秒)

    Managing device driver cross ring accesses
    21.
    发明授权
    Managing device driver cross ring accesses 有权
    管理设备驱动程序交叉环路访问

    公开(公告)号：US09183391B2

    公开(公告)日：2015-11-10

    申请号：US13997790

    申请日：2013-03-13

    申请人： Adriaan Van De Ven ,  Baiju V. Patel

    发明人： Adriaan Van De Ven ,  Baiju V. Patel

    IPC分类号： G06F11/00 ,  G06F12/14 ,  G06F12/16 ,  G08B23/00 ,  G06F21/56

    CPC分类号： G06F21/56 ,  G06F12/1491 ,  G06F21/564 ,  G06F21/74 ,  G06F2212/1052 ,  G06F2221/2113

    摘要： Technologies managing cross ring memory accesses by a device driver on a computing device includes configuring a memory page table associated with the device driver to disable cross ring memory accesses by the device driver, trapping attempted cross ring memory accesses by the device driver, and denying the attempted cross ring memory access if the device driver is determined to be malicious. If the device driver is determined not to be malicious, the memory page table is updated to allow the attempted cross ring memory access. The device driver may be analyzed to determine whether the device driver is malicious by comparing the device driver and the attempted cross ring memory access to security data, such as a device driver fingerprint and/or cross ring memory access heuristics, stored on the computing device.

    摘要翻译： 管理计算设备上的设备驱动器的交叉环存储器访问的技术包括配置与设备驱动程序相关联的存储器页表，以禁用设备驱动程序的交叉环存储器访问，捕获设备驱动程序尝试的交叉环存储器访问，以及拒绝 如果设备驱动程序被确定为恶意，则尝试跨环内存访问。 如果设备驱动程序被确定为不恶意，则更新内存页表以允许尝试的交叉环内存访问。 可以分析设备驱动程序以通过将设备驱动程序和尝试的交叉环存储器访问与存储在计算设备上的安全数据（诸如设备驱动程序指纹和/或交叉环存储器访问启发式）进行比较来确定设备驱动程序是否是恶意的 。

    Method and system for correlating data from multiple sources without compromising confidentiality requirements
    23.
    发明授权
    Method and system for correlating data from multiple sources without compromising confidentiality requirements 有权
    在不影响机密性要求的情况下，对来自多个来源的数据进行关联的方法和系统

    公开(公告)号：US07363320B2

    公开(公告)日：2008-04-22

    申请号：US10838509

    申请日：2004-05-04

    申请人： Baiju V. Patel

    发明人： Baiju V. Patel

    IPC分类号： G06F17/30

    CPC分类号： G06F21/6254 ,  Y10S707/99942 ,  Y10S707/99945 ,  Y10S707/99948

    摘要： A method and system is provided for correlating data. A data tuple includes a unique record ID and a record. At least one data tuple is sent from a data supplier to a data user. An entity correlator receives at least one pair of the record ID and an identifying ID from a data supplier. The data user forwards a record ID list to the entity correlator. The record ID list includes at least one record ID. The entity correlator generates an entity list and sends it to the data user. The entity list correlates each entity in the entity list with the at least one record ID.

    摘要翻译： 提供了一种用于关联数据的方法和系统。 数据元组包括唯一的记录ID和记录。 至少一个数据元组从数据供应商发送到数据用户。 实体相关器从数据提供者接收至少一对记录ID和识别ID。 数据用户将记录ID列表转发到实体相关器。 记录ID列表至少包括一个记录ID。 实体相关器生成实体列表并将其发送给数据用户。 实体列表将实体列表中的每个实体与至少一个记录ID相关联。

    STACK PIVOT DETECTION SYSTEMS AND METHODS
    24.
    发明申请
    STACK PIVOT DETECTION SYSTEMS AND METHODS 审中-公开

    公开(公告)号：US20180285559A1

    公开(公告)日：2018-10-04

    申请号：US15472181

    申请日：2017-03-28

    申请人： Rodrigo Branco ,  Xiaoning Li ,  David M. Durham ,  Hongliang Gao ,  Stephen A. Fischer ,  Baiju V. Patel

    发明人： Rodrigo Branco ,  Xiaoning Li ,  David M. Durham ,  Hongliang Gao ,  Stephen A. Fischer ,  Baiju V. Patel

    IPC分类号： G06F21/52 ,  G06F21/55 ,  G06F15/78

    摘要： The present disclosure is directed to systems and methods for detecting stack-pivot attacks in a processor-based device. Processor circuitry executes one or more applications via sequential execution of instructions on a stack. Stack pivot attacks occur when an attacker takes control of the stack and uses the stack to execute a series of code sections referred to as “gadgets.” A stack-pivot attack detector establishes an allowable processor stack offset change value associated with an application and monitors a processor stack offset change value responsive to an occurrence of a processor stack exchange instruction. A stack-pivot attack is detected when the processor offset change value exceeds the allowable processor stack offset change value. Upon detecting a stack-pivot attack, the stack-pivot detection circuitry causes the selective termination of the application.

    Structured exception handling for application-managed thread units
    30.
    发明申请
    Structured exception handling for application-managed thread units 有权
    应用程序管理的线程单元的结构化异常处理

    公开(公告)号：US20080148259A1

    公开(公告)日：2008-06-19

    申请号：US11642384

    申请日：2006-12-19

    申请人： Richard A. Hankins ,  Gautham N. Chinya ,  Hong Wang ,  David K. Poulsen ,  Shirish Aundhe ,  Baiju V. Patel ,  Sanjiv M. Shah

    发明人： Richard A. Hankins ,  Gautham N. Chinya ,  Hong Wang ,  David K. Poulsen ,  Shirish Aundhe ,  Baiju V. Patel ,  Sanjiv M. Shah

    IPC分类号： G06F9/46

    CPC分类号： G06F9/4812 ,  G06F9/3851 ,  G06F9/3861

    摘要： Methods, data structures, instructions, and techniques for structured exception handling for user-level threads in a multi-threading system are provided. Registered filter routines may be dispatched to a thread unit not managed by the operating system (OS). The dispatch may occur by allowing an OS-managed thread unit (proxy) to invoke the OS-provided structured exception handling service (including dispatcher) on behalf of the sequestered thread unit. Alternatively, an OS-managed thread unit may include dispatch code and may, without OS intervention, dispatch the filter routine to the sequestered thread unit. Other embodiments are also described and claimed.

    摘要翻译： 提供了用于多线程系统中的用户级线程的结构化异常处理的方法，数据结构，指令和技术。 注册的过滤器例程可以被分派到不由操作系统（OS）管理的线程单元。 调度可以通过允许OS管理的线程单元（代理）代表被隔离的线程单元来调用OS提供的结构化异常处理服务（包括调度程序）。 或者，OS管理的线程单元可以包括调度代码，并且可以在没有OS干预的情况下将过滤器例程分派到隔离的线程单元。 还描述和要求保护其他实施例。