On-access scan of memory for malware
    41.
    发明申请
    On-access scan of memory for malware 有权
    恶意软件的内存访问扫描

    公开(公告)号:US20060200863A1

    公开(公告)日:2006-09-07

    申请号:US11070468

    申请日:2005-03-01

    IPC分类号: G06F12/14

    CPC分类号: G06F12/145 G06F21/562

    摘要: The present invention provides a system, method, and computer-readable medium for identifying malware that is loaded in the memory of a computing device. Software routines implemented by the present invention track the state of pages loaded in memory using page table access bits available from a central processing unit. A page in memory may be in a state that is “unsafe” or potentially infected with malware. In this instance, the present invention calls a scan engine to search a page for malware before information on the page is executed.

    摘要翻译: 本发明提供一种用于识别加载到计算设备的存储器中的恶意软件的系统,方法和计算机可读介质。 由本发明实现的软件程序使用从中央处理单元获得的页表访问位来跟踪加载在存储器中的页的状态。 内存中的页面可能处于“不安全”或可能感染恶意软件的状态。 在这种情况下,本发明在页面上的信息被执行之前,调用扫描引擎来搜索页面中的恶意软件。

    Method for refining paper or cellulose fibers in an aqueous suspension
    42.
    发明申请
    Method for refining paper or cellulose fibers in an aqueous suspension 审中-公开
    在水性悬浮液中提炼纸或纤维素纤维的方法

    公开(公告)号:US20060186235A1

    公开(公告)日:2006-08-24

    申请号:US10565490

    申请日:2004-07-21

    IPC分类号: B02C21/00

    CPC分类号: D21B1/12 D21D1/38

    摘要: A method for refining aqueous suspended fibers, the fibers being paper fibers or pulp fibers including the steps of leading, pressing, forming, temporarily attaching, supplying and discharging. The leading step includes leading the aqueous suspended fibers through at least one refining zone which is located between an inside wall of a rotating refiner drum and at least one refiner roll, the refiner roll rotating in association with the refiner drum. The pressing step includes pressing the refiner roll and the refiner drum against each other thereby causing a mechanical refining force to be transferred to the fibers so that strength properties of paper produced therefrom are altered. The forming step includes forming a fibrous stock layer on the inside wall of the rotating refiner by the aqueous suspended paper fibers. The temporarily attaching step includes temporarily attaching the fibrous stock layer to the inside wall due to rotation. The supplying step includes supplying a continuous flow of liquid with the aqueous suspended paper fibers to the fibrous stock layer. The discharging step includes discharging the liquid from the fibrous stock layer.

    摘要翻译: 一种精制含水悬浮纤维的方法,所述纤维是纸纤维或纸浆纤维,包括引导,压制,成型,临时附着,供给和排出的步骤。 引导步骤包括引导水悬浮纤维通过至少一个精炼区,该精炼区位于旋转精炼机滚筒的内壁和至少一个精炼辊之间,该精炼辊与精炼机滚筒一起旋转。 压制步骤包括将精磨辊和精磨机滚筒彼此挤压,从而使机械精炼力转移到纤维上,从而改变由其制造的纸张的强度性能。 成形步骤包括通过水性悬浮纸纤维在旋转精磨机的内壁上形成纤维料层。 临时安装步骤包括由于旋转而临时将纤维料层附着在内壁上。 供应步骤包括将水性悬浮纸纤维的连续流动液体供应到纤维原料层。 排出步骤包括从纤维料层排出液体。

    Computer security management, such as in a virtual machine or hardened operating system
    43.
    发明申请
    Computer security management, such as in a virtual machine or hardened operating system 有权
    计算机安全管理,如虚拟机或硬化操作系统

    公开(公告)号:US20060136720A1

    公开(公告)日:2006-06-22

    申请号:US11019094

    申请日:2004-12-21

    IPC分类号: H04L9/00

    摘要: A security scheme provides security to one or more self-contained operating environment instances executing on a computer. The security scheme may include implementing a set of security applications that may be controlled by a supervisory process, or the like. Both the set of security applications and the supervisory process may operate on a host system of the computer, which may also provide a platform for execution of the one or more self-contained operating environments. The security scheme protects processes running in the one or more self-contained operating environment and processes running on the computer outside of the self-contained operating environments.

    摘要翻译: 安全方案为在计算机上执行的一个或多个自包含的操作环境实例提供安全性。 安全方案可以包括实现可由监督过程等控制的一组安全应用。 所述一组安全应用程序和监督过程可以在计算机的主机系统上操作,其还可以提供用于执行一个或多个独立操作环境的平台。 安全性方案保护在独立操作环境中运行的进程和在独立操作环境之外的计算机上运行的进程。

    Credential authentication for mobile users

    公开(公告)号:US07047560B2

    公开(公告)日:2006-05-16

    申请号:US09894607

    申请日:2001-06-28

    IPC分类号: H04L9/32

    摘要: Methods, systems, and computer program products for authenticating a mobile client that may have an input system optimized for numeric input. A mobile gateway receives authentication credentials from a mobile client and uses an authentication filter to map the authentication credentials according to pre-established criteria. The authentication filter may change the domain name, the username, or both. Then, the mapped authentication credentials are sent to a network that includes the content server being accessed. Any access privileges granted to the mobile client are based on the mapped authentication credentials. The mobile gateway may be configured to accept connections only from known servers. Mobile authentication credentials may be maintained in one or more domains, possibly having a trust relationship, or may be stored in a separately administered credential database.

    Negotiating secure connections through a proxy server

    公开(公告)号:US06996841B2

    公开(公告)日:2006-02-07

    申请号:US09838745

    申请日:2001-04-19

    IPC分类号: H04L9/00

    摘要: Methods, systems, and computer program products for negotiating a secure end-to-end connection using a proxy server as an intermediary. The client first negotiates a secure connection between the client and the proxy so that any credentials exchanged will be encrypted. After the exchange of authentication credentials, the secure client-proxy connection is altered so that no further encryption takes place. The client and server then negotiate a secure end-to-end connection through the proxy, with the secure end-to-end connection being encapsulated within the insecure client-proxy connection. In this way, the overhead of creating a separate client-proxy connection for the secure end-to-end connection may be avoided, but the insecure client-proxy connection introduces only minimal overhead because it no longer encrypts any data that it carries.

    Authentication through multiple proxy servers
    46.
    发明申请
    Authentication through multiple proxy servers 有权
    通过多个代理服务器进行身份验证

    公开(公告)号:US20050114531A1

    公开(公告)日:2005-05-26

    申请号:US10977208

    申请日:2004-10-29

    IPC分类号: H04L29/06 G06F15/16

    摘要: Methods, systems, computer program products and data structures are described which allow a client to communicate with a server even though multiple proxies that require different authentication data must be traversed to allow such communication. In operation, the client first authenticates to a first proxy using authentication data appropriate for the first proxy. The client then authenticates to a second proxy using different authentication data that is appropriate for the second proxy. This proxy authentication continues through as many proxies as necessary until the client is in communication with the server.

    摘要翻译: 描述了允许客户端与服务器通信的方法,系统,计算机程序产品和数据结构,即使必须遍历需要不同认证数据的多个代理来允许这样的通信。 在操作中,客户端首先使用适合于第一代理的认证数据向第一代理进行认证。 客户端然后使用适合于第二代理的不同认证数据来认证到第二代理。 该代理身份验证将继续通过尽可能多的代理,直到客户端与服务器通信。