中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

34 records (took 0.017 seconds)

    Extraction and comparison of hybrid program binary features
    22.
    发明授权
    Extraction and comparison of hybrid program binary features 有权

    公开(公告)号：US10289843B2

    公开(公告)日：2019-05-14

    申请号：US15479928

    申请日：2017-04-05

    Applicant: NEC Laboratories America, Inc.

    Inventor： Junghwan Rhee ,  Zhichun Li ,  Zhenyu Wu ,  Kangkook Jee ,  Guofei Jiang

    IPC: G06F21/56 ,  G06F11/36

    Abstract: Systems and methods for identifying similarities in program binaries, including extracting program binary features from one or more input program binaries to generate corresponding hybrid features. The hybrid features include a reference feature, a resource feature, an abstract control flow feature, and a structural feature. Combinations of a plurality of pairs of binaries are generated from the extracted hybrid features, and a similarity score is determined for each of the pairs of binaries. A hybrid difference score is generated based on the similarity score for each of the binaries combined with input hybrid feature parameters. A likelihood of malware in the input program is identified based on the hybrid difference score.

    HOST BEHAVIOR AND NETWORK ANALYTICS BASED AUTOMOTIVE SECURE GATEWAY
    23.
    发明申请
    HOST BEHAVIOR AND NETWORK ANALYTICS BASED AUTOMOTIVE SECURE GATEWAY 审中-公开

    公开(公告)号：US20190104108A1

    公开(公告)日：2019-04-04

    申请号：US16146166

    申请日：2018-09-28

    Applicant: NEC Laboratories America, Inc. ,  NEC Corporation

    Inventor： Junghwan Rhee ,  Hongyu Li ,  Shuai Hao ,  Chung Hwan Kim ,  Zhenyu Wu ,  Zhichun Li ,  Kangkook Jee ,  Lauri Korts-Parn

    IPC: H04L29/06

    Abstract: Systems and methods for an automotive security gateway include an in-gateway security system that monitors local host behaviors in vehicle devices to identify anomalous local host behaviors using a blueprint model trained to recognize secure local host behaviors. An out-of-gateway security system monitors network traffic across remote hosts, local devices, hotspot network, and in-car network to identify anomalous behaviors using deep packet inspection to inspect packets of the network. A threat mitigation system issues threat mitigation instructions corresponding to the identified anomalous local host behaviors and the anomalous remote host behaviors to secure the vehicle devices by removing the identified anomalous local host behaviors and the anomalous remote host behaviors. Automotive security gateway services and vehicle electronic control units operate the vehicle devices according to the threat mitigation instructions.

    Graphics processing unit accelerated trusted execution environment
    26.
    发明授权
    Graphics processing unit accelerated trusted execution environment 有权

    公开(公告)号：US11295008B2

    公开(公告)日：2022-04-05

    申请号：US16787610

    申请日：2020-02-11

    Applicant: NEC Laboratories America, Inc.

    Inventor： Chung Hwan Kim ,  Junghwan Rhee ,  Kangkook Jee ,  Zhichun Li ,  Adil Ahmad ,  Haifeng Chen

    IPC: G06F21/53 ,  G06F21/60 ,  G06F21/12 ,  G06F9/455 ,  G06F21/54 ,  G06F21/44

    Abstract: Systems and methods for implementing a system architecture to support a trusted execution environment (TEE) with computational acceleration are provided. The method includes establishing a first trusted channel between a user application stored on an enclave and a graphics processing unit (GPU) driver loaded on a hypervisor. Establishing the first trusted channel includes leveraging page permissions in an extended page table (EPT) to isolate the first trusted channel between the enclave and the GPU driver in a physical memory of an operating system (OS). The method further includes establishing a second trusted channel between the GPU driver and a GPU device. The method also includes launching a unified TEE that includes the enclave and the hypervisor with execution of application code of the user application.

    PATH-BASED PROGRAM LINEAGE INFERENCE ANALYSIS
    30.
    发明申请
    PATH-BASED PROGRAM LINEAGE INFERENCE ANALYSIS 审中-公开

    公开(公告)号：US20190050562A1

    公开(公告)日：2019-02-14

    申请号：US16039993

    申请日：2018-07-19

    Applicant: NEC Laboratories America, Inc. ,  NEC Corporation

    Inventor： Junghwan Rhee ,  Zhenyu Wu ,  Lauri Korts-Parn ,  Kangkook Jee ,  Zhichun Li ,  Omid Setayeshfar

    IPC: G06F21/55 ,  G06F21/56 ,  H04L29/06 ,  G06F21/52 ,  G06F17/30

    Abstract: Systems and methods are disclosed for securing an enterprise environment by detecting suspicious software. A global program lineage graph is constructed. Construction of the global program lineage graph includes creating a node for each version of a program having been installed on a set of user machines. Additionally, at least two nodes are linked with a directional edge. For each version of the program, a prevalence number of the set of user machines on which each version of the program had been installed is determined; and the prevalence number is recorded to the metadata associated with the respective node. Anomalous behavior is identified based on structures formed by the at least two nodes and associated directional edge in the global program lineage graph. An alarm is displayed on a graphical user interface for each suspicious software based on the identified anomalous behavior.

Patent Agency Ranking