Method and apparatus for run-time in-memory patching of code from a service processor
    1.
    发明授权
    Method and apparatus for run-time in-memory patching of code from a service processor 有权
    从服务处理器的代码运行时内存补丁的方法和装置

    公开(公告)号:US08286238B2

    公开(公告)日:2012-10-09

    申请号:US11540373

    申请日:2006-09-29

    IPC分类号: H04L29/06

    CPC分类号: G06F8/656

    摘要: Methods and apparatuses enable in-memory patching of a program loaded in volatile memory. A service processor identifies a program to be patched and an associated patch for the program. The patch is loaded into memory, including applying relocation fix-ups to the patch. The service processor directs the program to the patch in place of the segment of the program to be patched. The program implements the patch while maintaining program state, and without suspending execution of the program.

    摘要翻译: 方法和装置使得能够在加载在易失性存储器中的程序的内存中修补。 服务处理器识别要修补的程序和程序的相关修补程序。 修补程序加载到内存中,包括将修补程序应用于修补程序。 服务处理器将程序引导到补丁代替要修补的程序的段。 该程序在维护程序状态的同时实现补丁,并且不会暂停程序的执行。

    Method and apparatus for run-time in-memory patching of code from a service processor
    2.
    发明申请
    Method and apparatus for run-time in-memory patching of code from a service processor 有权
    从服务处理器的代码运行时内存补丁的方法和装置

    公开(公告)号:US20080083030A1

    公开(公告)日:2008-04-03

    申请号:US11540373

    申请日:2006-09-29

    IPC分类号: G06F12/14

    CPC分类号: G06F8/656

    摘要: Methods and apparatuses enable in-memory patching of a program loaded in volatile memory. A service processor identifies a program to be patched and an associated patch for the program. The patch is loaded into memory, including applying relocation fix-ups to the patch. The service processor directs the program to the patch in place of the segment of the program to be patched. The program implements the patch while maintaining program state, and without suspending execution of the program.

    摘要翻译: 方法和装置使得能够在加载在易失性存储器中的程序的内存中修补。 服务处理器识别要修补的程序和程序的相关修补程序。 修补程序加载到内存中,包括将修补程序应用于修补程序。 服务处理器将程序引导到补丁代替要修补的程序的段。 该程序在维护程序状态的同时实现补丁,并且不会暂停程序的执行。

    Method and apparatus for secure page swapping in virtual memory systems
    4.
    发明申请
    Method and apparatus for secure page swapping in virtual memory systems 审中-公开
    用于在虚拟存储器系统中进行安全页面交换的方法和装置

    公开(公告)号:US20080077767A1

    公开(公告)日:2008-03-27

    申请号:US11528161

    申请日:2006-09-27

    IPC分类号: G06F12/00 G06F13/00

    摘要: Embodiments described herein disclose a method and apparatus for secure page swapping in a virtual memory system. An integrity check value mechanism is used to protect software programs from run-time attacks against memory pages while those pages are swapped to secondary memory. A hash value is computed for an agent page as it is swapped from primary memory to secondary memory. When the page is swapped back into primary memory from secondary memory, that hash value is recomputed to verify that the page was not modified while stored in secondary memory. Alternatively, the hash value is pre-computed and placed in an integrity manifest wherein it is retrieved and verified when the page is loaded back into primary memory from secondary memory.

    摘要翻译: 本文描述的实施例公开了一种用于虚拟存储器系统中的安全页面交换的方法和装置。 完整性检查值机制用于保护软件程序免受针对存储器页面的运行时攻击,而这些页面被交换到辅助存储器。 当代理页面从主存储器交换到辅助存储器时,计算哈希值。 当页面从辅助存储器交换回主存储器时,重新计算该哈希值,以验证在存储在辅助存储器中的页面是否未被修改。 或者,哈希值是预先计算的并且被放置在完整性清单中,其中当从第二存储器将页面加载回主存储器时,其被检索和验证。

    SYSTEMS AND METHODS FOR SECURE HOST RESOURCE MANAGEMENT
    6.
    发明申请
    SYSTEMS AND METHODS FOR SECURE HOST RESOURCE MANAGEMENT 有权
    保护资源管理的系统和方法

    公开(公告)号:US20110107355A1

    公开(公告)日:2011-05-05

    申请号:US12987813

    申请日:2011-01-10

    IPC分类号: G06F9/44

    CPC分类号: G06F12/0866 G06F13/387

    摘要: Systems and methods are described herein to provide for secure host resource management on a computing device. Other embodiments include apparatus and system for management of one or more host device drivers from an isolated execution environment. Further embodiments include methods for querying and receiving event data from manageable resources on a host device. Further embodiments include data structures for the reporting of event data from one or more host device drivers to one or more capability modules.

    摘要翻译: 这里描述了系统和方法来提供计算设备上的安全的主机资源管理。 其他实施例包括用于从隔离执行环境管理一个或多个主机设备驱动器的装置和系统。 另外的实施例包括用于从主机设备上的可管理资源查询和接收事件数据的方法。 另外的实施例包括用于将事件数据从一个或多个主机设备驱动程序报告给一个或多个能力模块的数据结构。

    Systems and methods for secure host resource management
    7.
    发明授权
    Systems and methods for secure host resource management 有权
    用于安全主机资源管理的系统和方法

    公开(公告)号:US07870565B2

    公开(公告)日:2011-01-11

    申请号:US11173885

    申请日:2005-06-30

    IPC分类号: G06F9/44

    CPC分类号: G06F12/0866 G06F13/387

    摘要: Systems and methods are described herein to provide for secure host resource management on a computing device. Other embodiments include apparatus and system for management of one or more host device drivers from an isolated execution environment. Further embodiments include methods for querying and receiving event data from manageable resources on a host device. Further embodiments include data structures for the reporting of event data from one or more host device drivers to one or more capability modules.

    摘要翻译: 这里描述了系统和方法来提供计算设备上的安全的主机资源管理。 其他实施例包括用于从隔离执行环境管理一个或多个主机设备驱动器的装置和系统。 另外的实施例包括用于从主机设备上的可管理资源查询和接收事件数据的方法。 另外的实施例包括用于将事件数据从一个或多个主机设备驱动程序报告给一个或多个能力模块的数据结构。

    Systems and methods for secure host resource management
    8.
    发明授权
    Systems and methods for secure host resource management 有权
    用于安全主机资源管理的系统和方法

    公开(公告)号:US08510760B2

    公开(公告)日:2013-08-13

    申请号:US12987813

    申请日:2011-01-10

    IPC分类号: G06F9/44

    CPC分类号: G06F12/0866 G06F13/387

    摘要: Systems and methods are described herein to provide for secure host resource management on a computing device. Other embodiments include apparatus and system for management of one or more host device drivers from an isolated execution environment. Further embodiments include methods for querying and receiving event data from manageable resources on a host device. Further embodiments include data structures for the reporting of event data from one or more host device drivers to one or more capability modules.

    摘要翻译: 这里描述了系统和方法来提供计算设备上的安全的主机资源管理。 其他实施例包括用于从隔离执行环境管理一个或多个主机设备驱动器的装置和系统。 另外的实施例包括用于从主机设备上的可管理资源查询和接收事件数据的方法。 另外的实施例包括用于将事件数据从一个或多个主机设备驱动程序报告给一个或多个能力模块的数据结构。

    SYSTEMS AND METHODS FOR SECURE HOST RESOURCE MANAGEMENT
    9.
    发明申请
    SYSTEMS AND METHODS FOR SECURE HOST RESOURCE MANAGEMENT 审中-公开
    保护资源管理的系统和方法

    公开(公告)号:US20130304986A1

    公开(公告)日:2013-11-14

    申请号:US13943408

    申请日:2013-07-16

    IPC分类号: G06F12/08

    CPC分类号: G06F12/0866 G06F13/387

    摘要: Systems and methods are described herein to provide for secure host resource management on a computing device. Other embodiments include apparatus and system for management of one or more host device drivers from an isolated execution environment. Further embodiments include methods for querying and receiving event data from manageable resources on a host device. Further embodiments include data structures for the reporting of event data from one or more host device drivers to one or more capability modules.

    摘要翻译: 这里描述了系统和方法来提供计算设备上的安全的主机资源管理。 其他实施例包括用于从隔离执行环境管理一个或多个主机设备驱动器的装置和系统。 另外的实施例包括用于从主机设备上的可管理资源查询和接收事件数据的方法。 另外的实施例包括用于将事件数据从一个或多个主机设备驱动程序报告给一个或多个能力模块的数据结构。