公开(公告)号：US08156559B2

公开(公告)日：2012-04-10

申请号：US11565426

申请日：2006-11-30

申请人： Shuo Chen ,  Jose Meseguer ,  Ralf Sasse ,  Jiahe Helen Wang ,  Yi-Min Wang

发明人： Shuo Chen ,  Jose Meseguer ,  Ralf Sasse ,  Jiahe Helen Wang ,  Yi-Min Wang

IPC分类号： H04L29/06

CPC分类号： G06F11/3608 ,  G06F21/577 ,  G06F21/83

摘要： To achieve end-to-end security, traditional machine-to-machine security measures are insufficient if the integrity of the graphical user interface (GUI) is compromised. GUI logic flaws are a category of software vulnerabilities that result from logic flaws in GUI implementation. The invention described here is a technology for uncovering these flaws using a systematic reasoning approach. Major steps in the technology include: (1) mapping a visual invariant to a program invariant; (2) formally modeling the program logic, the user actions and the execution context, and systematically exploring the possibilities of violations of the program invariant; (3) finding real spoofing attacks based on the exploration.

公开(公告)号：US08126894B2

公开(公告)日：2012-02-28

申请号：US12327783

申请日：2008-12-03

申请人： Chao Liu ,  Yi-Min Wang ,  Fan Guo

发明人： Chao Liu ,  Yi-Min Wang ,  Fan Guo

IPC分类号： G06F7/00 ,  G06F17/30

CPC分类号： G06F17/30864

摘要： Techniques are described for generating a statistical model from observed click chains. The model can be used to compute a probability that a document is relevant to a given search query. With the model, a probability of a user examining a given document in a given search result conditionally depends on: a probability that a preceding document in the given search result is examined by a user viewing the given search result; a probability that the preceding document is clicked on by a user viewing the given search result, which conditionally depends directly on the probability that the preceding document is examined and on a probability of relevance of the preceding document.

摘要翻译： 描述了从观察到的点击链中生成统计模型的技术。 该模型可用于计算文档与给定搜索查询相关的概率。 使用该模型，用户在给定搜索结果中检查给定文档的概率有条件地取决于：给定搜索结果中的前一个文档被查看给定搜索结果的用户检查的概率; 观看给定搜索结果的用户点击前一文档的概率，其有条件地直接取决于前一文档被检查的概率和前一文档的相关概率。

公开(公告)号：US20110137989A1

公开(公告)日：2011-06-09

申请号：US12633798

申请日：2009-12-09

申请人： Emre Mehmet Kiciman ,  Chun-Kai Wang ,  Yi-Min Wang

发明人： Emre Mehmet Kiciman ,  Chun-Kai Wang ,  Yi-Min Wang

IPC分类号： G06F15/16 ,  G06F17/30 ,  G06F17/00 ,  G06Q30/00

CPC分类号： G06F17/30477 ,  G06F17/30864 ,  G06Q30/02 ,  G06Q30/0251

摘要： A method described herein includes acts of receiving data from a social networking application, wherein the data is generated by a first individual, and executing an entity extraction algorithm to extract at least one entity from the received data. The method also includes automatically causing a hyperlink to be displayed on a computing device utilized by a second individual, wherein the hyperlink is based at least in part upon the at least one entity, wherein the hyperlink is configured to direct the first individual to a search engine and is further configured to cause the search engine to execute a search that pertains to the at least one entity.

摘要翻译： 本文描述的方法包括从社交网络应用接收数据的动作，其中数据由第一个体生成，并且执行实体提取算法以从接收的数据中提取至少一个实体。 所述方法还包括自动地使超链接显示在由第二个人使用的计算设备上，其中所述超链接至少部分地基于所述至少一个实体，其中所述超链接被配置为将所述第一个人引导到搜索 引擎，并且还被配置为使搜索引擎执行与至少一个实体有关的搜索。

公开(公告)号：US20110054878A1

公开(公告)日：2011-03-03

申请号：US12547704

申请日：2009-08-26

申请人： Ming Zhang ,  Yi-Min Wang ,  Albert Greenberg ,  Zhichun Li

发明人： Ming Zhang ,  Yi-Min Wang ,  Albert Greenberg ,  Zhichun Li

IPC分类号： G06G7/62 ,  G06F17/30

CPC分类号： H04L67/02 ,  G06F11/3419 ,  G06F11/3447 ,  G06F11/3457 ,  G06F2201/875

摘要： Embodiments of automated cloud service performance prediction are disclosed. The automated cloud service performance prediction includes extracting a parental dependency graph (PDG) for a webpage. The PDG encapsulates one or more dependency relationships for each web object in the webpage. The prediction further includes determining an original page load time (PLT) and original timing information of a webpage. The prediction also includes simulating a page loading of the webpage based on adjusted timing information of each web object and the PDG to estimate a new PLT of the webpage. The prediction additionally includes comparing the original PLT of the webpage to the new PLT of the webpage to determine whether the adjusted timing information increased or decreased the new PLT of the webpage.

摘要翻译： 公开了自动云服务性能预测的实施例。 自动云服务性能预测包括提取网页的父母依赖图（PDG）。 PDG封装网页中每个Web对象的一个​​或多个依赖关系。 预测还包括确定网页的原始页面加载时间（PLT）和原始定时信息。 该预测还包括基于每个web对象和PDG的调整的定时信息来模拟网页的加载，以估计网页的新的PLT。 该预测还包括将网页的原始PLT与网页的新PLT进行比较，以确定调整的定时信息是增加还是减少网页的新PLT。

公开(公告)号：US20100179929A1

公开(公告)日：2010-07-15

申请号：US12351013

申请日：2009-01-09

申请人： Xiaoxin Yin ,  Vijay Ravindran Nair ,  Ryan Frederick Stewart ,  Fang Liu ,  Junhua Wang ,  Tiffany Kumi Dohzen ,  Yi-Min Wang

发明人： Xiaoxin Yin ,  Vijay Ravindran Nair ,  Ryan Frederick Stewart ,  Fang Liu ,  Junhua Wang ,  Tiffany Kumi Dohzen ,  Yi-Min Wang

IPC分类号： G06F15/18 ,  G06N5/02

CPC分类号： G06F17/30864

摘要： Systems and methodologies for improved query classification and processing are provided herein. As described herein, a query prediction model can be constructed from a set of training data (e.g., diagnostic data obtained from an automatic diagnostic system and/or other suitable data) using a machine learning-based technique. Subsequently upon receiving a query, a set of features corresponding to the query, such as the length and/or frequency of the query, unigram probabilities of respective words and/or groups of words in the query, presence of pre-designated words or phrases in the query, or the like, can be generated. The generated features can then be analyzed in combination with the query prediction model to classify the query by predicting whether the query is aimed at a head Uniform Resource Locator (URL) or a tail URL. Based on this prediction, an appropriate index or combination of indexes can be assigned to answer the query.

摘要翻译： 本文提供了改进的查询分类和处理的系统和方法。 如本文所述，可以使用基于机器学习的技术从一组训练数据（例如，从自动诊断系统获得的诊断数据和/或其他合适的数据）来构建查询预测模型。 随后在接收到查询后，查询对应的一组特征，诸如查询的长度和/或频率，查询中各个单词和/或单词组的单位概率，预先指定的单词或短语的存在 在查询等中可以生成。 然后可以结合查询预测模型分析生成的特征，以通过预测查询是针对头统一资源定位符（URL）还是尾URL来对查询进行分类。 基于该预测，可以分配适当的索引或索引组合来回答查询。

公开(公告)号：US07756987B2

公开(公告)日：2010-07-13

申请号：US11696580

申请日：2007-04-04

申请人： Yi-Min Wang ,  Douglas Beck ,  Chad Verbowski ,  Bradford Daniels ,  Ming Ma

发明人： Yi-Min Wang ,  Douglas Beck ,  Chad Verbowski ,  Bradford Daniels ,  Ming Ma

IPC分类号： G06F15/173

CPC分类号： G06F21/6218 ,  G06F2221/2149 ,  H04L29/12594 ,  H04L61/3015 ,  H04L61/303

摘要： An exemplary method includes providing a typographically erroneous domain name, tracing the domain name where tracing includes entering the domain name as part of a URL and recording one or more subsequent URLs, identifying a domain parking service for the domain name based at least in part on information in one of the recorded URLs, determining client identification information in at least one of the recorded URLs where the client identification information identifies a customer of the domain parking service and blocking one or more domain names based at least in part on the client identification information. Other exemplary technologies are also disclosed.

摘要翻译： 一种示例性方法包括提供排版错误的域名，跟踪域名，其中跟踪包括作为URL的一部分输入域名并记录一个或多个后续URL，至少部分地基于域名来标识域名停放服务 在记录的URL之一中的信息，确定至少一个记录的URL中的客户端标识信息，其中客户识别信息识别域停车服务的客户并且至少部分地基于客户端标识信息来阻止一个或多个域名 。 还公开了其它示例性技术。

公开(公告)号：US07627898B2

公开(公告)日：2009-12-01

申请号：US10997768

申请日：2004-11-23

申请人： Douglas Reed Beck ,  Aaron Roy Johnson ,  Roussi A. Roussev ,  Chad E. Verbowski ,  Binh Dou Vo ,  Yi-Min Wang

发明人： Douglas Reed Beck ,  Aaron Roy Johnson ,  Roussi A. Roussev ,  Chad E. Verbowski ,  Binh Dou Vo ,  Yi-Min Wang

IPC分类号： G08B23/00

CPC分类号： G06F21/565

摘要： A method and system for detecting that a software system has been infected by software that attempts to hide properties related to the software system is provided. A detection system identifies that a suspect operating system has been infected by malware by comparing properties related to the suspect operating system as reported by the suspect operating system to properties as reported by another operating system that is assumed to be clean. The detection system compares the reported properties to the actual properties to identify any significant differences. A significant difference, such as the presence of an actual file not reported by the suspect operating system, may indicate that the suspect storage device is infected.

摘要翻译： 提供了一种用于检测软件系统已经被试图隐藏与软件系统相关的属性的软件感染的方法和系统。 检测系统通过将可疑操作系统报告的与可疑操作系统相关的属性与被假设为干净的另一个操作系统报告的属性进行比较来识别可疑操作系统已被恶意软件感染。 检测系统将报告的属性与实际属性进行比较，以确定任何显着差异。 一个显着的差异，如可疑操作系统未报告的实际文件的存在，可能会指示可疑存储设备被感染。

公开(公告)号：US07620995B2

公开(公告)日：2009-11-17

申请号：US11214131

申请日：2005-08-29

申请人： Chad E Verbowski ,  John D. Dunagan ,  Shuo Chen ,  Yi-Min Wang

发明人： Chad E Verbowski ,  John D. Dunagan ,  Shuo Chen ,  Yi-Min Wang

IPC分类号： G06F7/04 ,  G06F17/30

CPC分类号： G06F21/6218 ,  G06F2221/2101

摘要： A technique for identifying dependencies of an application upon a given security context includes monitoring security checks generated by the application. The security checks requiring elevated rights are identified and the state of execution of the application corresponding to the identified security checks may be logged. The security checks requiring elevated rights may be identified by monitoring access checks, monitoring privilege checks, checking user/group identifiers against a list of known identifiers associated with elevated rights, or the like.

摘要翻译： 用于在给定的安全上下文中识别应用的依赖性的技术包括监视应用产生的安全检查。 识别需要提升权限的安全检查，并且可能会记录与识别的安全检查对应的应用程序的执行状态。 可以通过监视访问检查，监视特权检查，针对与提升的权限相关联的已知标识符的列表等来检查用户/组标识符来识别需要提高权限的安全检查。

公开(公告)号：US07571482B2

公开(公告)日：2009-08-04

申请号：US11170792

申请日：2005-06-28

申请人： Alexey A. Polyakov ,  Gretchen L. Loihle ,  Mihai Costea ,  Robert J. Hensing, Jr. ,  Scott A. Field ,  Vincent R. Orgovan ,  Yi-Min Wang ,  Yun Lin

发明人： Alexey A. Polyakov ,  Gretchen L. Loihle ,  Mihai Costea ,  Robert J. Hensing, Jr. ,  Scott A. Field ,  Vincent R. Orgovan ,  Yi-Min Wang ,  Yun Lin

IPC分类号： G06F12/14 ,  G06F11/00

CPC分类号： G06F21/566

摘要： Embodiments of a RootKit detector are directed to identifying a RootKit on a computer that is designed to conceal malware. Aspects of the RootKit detector leverage services provided by kernel debugger facilities to automatically obtain data in specified data structures that are maintained by an operating system. Then the data obtained from the kernel debugger facilities is processed with an integrity checker that determines whether the data contains properties sufficient to declare that a RootKit is resident on the computer.

摘要翻译： RootKit检测器的实施例旨在识别被设计为隐藏恶意软件的计算机上的RootKit。 RootKit检测器的各个方面利用内核调试工具提供的服务来自动获取由操作系统维护的指定数据结构中的数据。 然后，使用完整性检查器处理从内核调试器设备获取的数据，该检查器确定数据是否包含足以声明RootKit驻留在计算机上的属性。

公开(公告)号：US20090164929A1

公开(公告)日：2009-06-25

申请号：US12137508

申请日：2008-06-11

申请人： Shuo Chen ,  Emre M. Kiciman ,  Yi-Min Wang

发明人： Shuo Chen ,  Emre M. Kiciman ,  Yi-Min Wang

IPC分类号： G06F3/048 ,  G06F7/06 ,  G06F17/30

CPC分类号： G06F16/9535

摘要： A system customizes search results. In one implementation, an exemplary system personalizes search results based on recommendations from members of online social networks to which the user belongs, who have made similar search queries in the past. The system also enables the user to arrange, insert, and delete search result entries into a customized search results queue from across multiple search engines. The user's own customizations of the search results may be shared, in turn, as recommendations for other users who submit similar search queries and who are associated with the user through online social networks. The system may automatically provide personally relevant search results for a subjective query. In one implementation, the system also posts search results that contain explicit recommendations made by peers, posts the reputation of the peers, and appends links to channels for directly communicating with those peers who submitted the recommendations or with peers who are currently performing a similar search.

摘要翻译： 系统自定义搜索结果。 在一个实现中，示例性系统基于来自用户所属的在线社交网络的成员的推荐来个性化搜索结果，过去谁进行了类似的搜索查询。 该系统还使得用户能够将搜索结果条目排列，插入和删除到来自多个搜索引擎的自定义搜索结果队列中。 用户自己的搜索结果的自定义可以反过来被分享给提交类似的搜索查询并且通过在线社交网络与用户相关联的其他用户的建议。 该系统可以自动提供用于主观查询的个人相关搜索结果。 在一个实现中，系统还发布包含同行提出的明确建议的搜索结果，发布对等体的声誉，并且附加链接到与提交建议的对等体直接通信的渠道，或者与正在执行类似搜索的对等体 。