利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

13 条记录 (耗时 0.021 秒)

    System and method for virtual partition monitoring
    1.
    发明授权
    System and method for virtual partition monitoring 有权
    用于虚拟分区监控的系统和方法

    公开(公告)号：US09311126B2

    公开(公告)日：2016-04-12

    申请号：US13192412

    申请日：2011-07-27

    申请人： Jonathan L. Edwards ,  Gregory W. Dalcher ,  John D. Teddy

    发明人： Jonathan L. Edwards ,  Gregory W. Dalcher ,  John D. Teddy

    IPC分类号： G06F21/55 ,  G06F21/56 ,  G06F9/455

    CPC分类号： G06F9/45558 ,  G06F21/53 ,  G06F21/554 ,  G06F21/56 ,  G06F21/64 ,  G06F2009/45583

    摘要： A method is provided in one example embodiment that includes rebasing a module in a virtual partition to load at a fixed address and storing a hash of a page of memory associated with the fixed address. An external handler may receive a notification associated with an event affecting the page. An internal agent within the virtual partition can execute a task and return results based on the task to the external handler, and a policy action may be taken based on the results returned by the internal agent. In some embodiments, a code portion and a data portion of the page can be identified and only a hash of the code portion is stored.

    摘要翻译： 在一个示例性实施例中提供了一种方法，其包括对虚拟分区中的模块进行重新加载以在固定地址加载并存储与固定地址相关联的存储器页面的散列。 外部处理程序可以接收与影响页面的事件相关联的通知。 虚拟分区内的内部代理可以执行一个任务，并将结果返回给外部处理程序，并根据内部代理返回的结果执行策略动作。 在一些实施例中，可以识别页面的代码部分和数据部分，并且仅存储代码部分的散列。

    SYSTEM AND METHOD FOR VIRTUAL PARTITION MONITORING
    2.
    发明申请
    SYSTEM AND METHOD FOR VIRTUAL PARTITION MONITORING 有权
    用于虚拟分区监控的系统和方法

    公开(公告)号：US20130031291A1

    公开(公告)日：2013-01-31

    申请号：US13192412

    申请日：2011-07-27

    申请人： Jonathan L. Edwards ,  Gregory W. Dalcher ,  John D. Teddy

    发明人： Jonathan L. Edwards ,  Gregory W. Dalcher ,  John D. Teddy

    IPC分类号： G06F12/08

    CPC分类号： G06F9/45558 ,  G06F21/53 ,  G06F21/554 ,  G06F21/56 ,  G06F21/64 ,  G06F2009/45583

    摘要： A method is provided in one example embodiment that includes rebasing a module in a virtual partition to load at a fixed address and storing a hash of a page of memory associated with the fixed address. An external handler may receive a notification associated with an event affecting the page. An internal agent within the virtual partition can execute a task and return results based on the task to the external handler, and a policy action may be taken based on the results returned by the internal agent. In some embodiments, a code portion and a data portion of the page can be identified and only a hash of the code portion is stored.

    摘要翻译： 在一个示例性实施例中提供了一种方法，其包括对虚拟分区中的模块进行重新加载以在固定地址加载并存储与固定地址相关联的存储器页面的散列。 外部处理程序可以接收与影响页面的事件相关联的通知。 虚拟分区内的内部代理可以执行一个任务，并将结果返回给外部处理程序，并根据内部代理返回的结果执行策略动作。 在一些实施例中，可以识别页面的代码部分和数据部分，并且仅存储代码部分的散列。

    System, method, and computer program product for scanning data utilizing one of a plurality of virtual machines of a device
    5.
    发明授权
    System, method, and computer program product for scanning data utilizing one of a plurality of virtual machines of a device 有权
    用于使用设备的多个虚拟机中的一个扫描数据的系统，方法和计算机程序产品

    公开(公告)号：US08645949B2

    公开(公告)日：2014-02-04

    申请号：US12132113

    申请日：2008-06-03

    申请人： Jonathan L. Edwards ,  John D. Teddy

    发明人： Jonathan L. Edwards ,  John D. Teddy

    IPC分类号： G06F9/455 ,  G06F11/00

    CPC分类号： G06F9/45558

    摘要： A system, method, and computer program product are provided for scanning data utilizing one of a plurality of virtual machines of a device. In use, data to be scanned is identified utilizing a first virtual machine of a device, where the device further includes at least one second virtual machine and a cache shared by the first virtual machine and the second virtual machine. Additionally, it is determined whether the data was previously scanned by the at least one second virtual machine, utilizing the cache. Furthermore, the data is conditionally scanned utilizing the first virtual machine based on the determination.

    摘要翻译： 提供了一种系统，方法和计算机程序产品，用于利用设备的多个虚拟机之一扫描数据。 在使用中，使用设备的第一虚拟机识别要扫描的数据，其中设备还包括至少一个第二虚拟机和由第一虚拟机和第二虚拟机共享的高速缓存。 此外，利用高速缓存来确定数据是否被先前由至少一个第二虚拟机扫描。 此外，基于该确定，利用第一虚拟机有条件地扫描数据。

    SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR SCANNING DATA UTILIZING ONE OF A PLURALITY OF VIRTUAL MACHINES OF A DEVICE
    6.
    发明申请
    SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR SCANNING DATA UTILIZING ONE OF A PLURALITY OF VIRTUAL MACHINES OF A DEVICE 有权
    用于扫描数据的系统，方法和计算机程序产品利用设备的虚拟机器的一个

    公开(公告)号：US20130275964A1

    公开(公告)日：2013-10-17

    申请号：US12132113

    申请日：2008-06-03

    申请人： Jonathan L. Edwards ,  John D. Teddy

    发明人： Jonathan L. Edwards ,  John D. Teddy

    IPC分类号： G06F9/455

    CPC分类号： G06F9/45558

    摘要： A system, method, and computer program product are provided for scanning data utilizing one of a plurality of virtual, machines of a device. In use, data to be scanned is identified utilizing a first virtual machine of a device, where the device further includes at least one second virtual machine and a cache shared by the first virtual machine and the second virtual machine. Additionally, it is determined whether the data was previously scanned by the at least one second virtual machine, utilizing the cache. Furthermore, the data is conditionally scanned utilizing the first virtual machine based on the determination.

    摘要翻译： 提供了一种系统，方法和计算机程序产品，用于利用设备的多个虚拟机器中的一个扫描数据。 在使用中，使用设备的第一虚拟机识别要扫描的数据，其中设备还包括至少一个第二虚拟机和由第一虚拟机和第二虚拟机共享的高速缓存。 此外，利用高速缓存来确定数据是否被先前由至少一个第二虚拟机扫描。 此外，基于该确定，利用第一虚拟机有条件地扫描数据。

    SYSTEMS AND METHODS FOR BEHAVIORAL SANDBOXING
    8.
    发明申请
    SYSTEMS AND METHODS FOR BEHAVIORAL SANDBOXING 有权
    用于行为障碍的系统和方法

    公开(公告)号：US20130254884A1

    公开(公告)日：2013-09-26

    申请号：US13898284

    申请日：2013-05-20

    申请人： Gregory William Dalcher ,  John D. Teddy

    发明人： Gregory William Dalcher ,  John D. Teddy

    IPC分类号： G06F21/53

    CPC分类号： G06F21/53 ,  G06F11/3466 ,  G06F21/552 ,  G06F21/566 ,  G06F2201/86 ,  G06F2221/2149 ,  H04L63/105 ,  H04L63/145 ,  H04L63/20

    摘要： Methods and system for behavioral sandboxing are described. In one example embodiment, a system for behavioral sandboxing can include a network and a computer. The network communicatively coupled to a source of an executable application. The computer communicatively couple to the network and including a behavioral analysis module and a plurality of execution environments. The behavioral analysis module is configured to perform behavioral analysis on the executable application downloaded over the network. The plurality of execution environments including a standard execution environment and a protected execution environment. The behavioral analysis module is configured to evaluate a plurality of behavioral characteristics of the executable application to determine whether the executable application should be executed within the protected execution environment prior to execution of the executable application. The behavioral analysis module also monitors execution of the executable application to determine whether the execution environment can be changed.

    摘要翻译： 描述了行为沙盒的方法和系统。 在一个示例实施例中，用于行为沙箱的系统可以包括网络和计算机。 网络通信地耦合到可执行应用的源。 计算机通信地耦合到网络并且包括行为分析模块和多个执行环境。 行为分析模块被配置为对通过网络下载的可执行应用程序执行行为分析。 多个执行环境包括标准执行环境和受保护的执行环境。 行为分析模块被配置为评估可执行应用的多个行为特征，以确定可执行应用是否应在执行可执行应用之前在受保护的执行环境中执行。 行为分析模块还监视可执行应用程序的执行，以确定是否可以更改执行环境。

    SYSTEMS AND METHODS FOR BEHAVIORAL SANDBOXING
    9.
    发明申请
    SYSTEMS AND METHODS FOR BEHAVIORAL SANDBOXING 有权
    用于行为障碍的系统和方法

    公开(公告)号：US20110145926A1

    公开(公告)日：2011-06-16

    申请号：US12638660

    申请日：2009-12-15

    申请人： Gregory William Dalcher ,  John D. Teddy

    发明人： Gregory William Dalcher ,  John D. Teddy

    IPC分类号： G06F21/00 ,  G06F11/00

    CPC分类号： G06F21/53 ,  G06F11/3466 ,  G06F21/552 ,  G06F21/566 ,  G06F2201/86 ,  G06F2221/2149 ,  H04L63/105 ,  H04L63/145 ,  H04L63/20

    摘要： Methods and system for behavioral sandboxing are described. In one example embodiment, a system for behavioral sandboxing can include a network and a computer. The network communicatively coupled to a source of an executable application. The computer communicatively couple to the network and including a behavioral analysis module and a plurality of execution environments. The behavioral analysis module is configured to perform behavioral analysis on the executable application downloaded over the network. The plurality of execution environments including a standard execution environment and a protected execution environment. The behavioral analysis module is configured to evaluate a plurality of behavioral characteristics of the executable application to determine whether the executable application should be executed within the protected execution environment prior to execution of the executable application. The behavioral analysis module also monitors execution of the executable application to determine whether the execution environment can be changed.

    摘要翻译： 描述了行为沙盒的方法和系统。 在一个示例实施例中，用于行为沙箱的系统可以包括网络和计算机。 网络通信地耦合到可执行应用的源。 计算机通信地耦合到网络并且包括行为分析模块和多个执行环境。 行为分析模块被配置为对通过网络下载的可执行应用程序执行行为分析。 多个执行环境包括标准执行环境和受保护的执行环境。 行为分析模块被配置为评估可执行应用的多个行为特征，以确定可执行应用是否应在执行可执行应用之前在受保护的执行环境中执行。 行为分析模块还监视可执行应用程序的执行，以确定是否可以更改执行环境。

    Zero footprint method and apparatus for expanding allocated memory space of a process using a virtual memory area
    10.
    发明授权
    Zero footprint method and apparatus for expanding allocated memory space of a process using a virtual memory area 失效
    用于扩展使用虚拟内存区域的进程的分配的内存空间的零足迹方法和装置

    公开(公告)号：US5974249A

    公开(公告)日：1999-10-26

    申请号：US823675

    申请日：1997-03-24

    申请人： Scott Elliott ,  John D. Teddy

    发明人： Scott Elliott ,  John D. Teddy

    IPC分类号： G01R31/28

    CPC分类号： G06F9/5016 ,  G06F11/3644

    摘要： The invention is an apparatus and computer method for controlling the operation of a computer running under an operating system such as WINDOWS.RTM. 95 and WINDOWS.RTM. NT operating system, or their like, that do not require a footprint in the programs running under the operating system. A program, hereinafter referred to as CrashGuard.TM., is stored and installed in a computer thereby being established as the "debugger" in the user's systems. Once so established CrashGuard.TM. may be stored elsewhere then the computer memory. Whenever a fatal error occurs the "Just in Time" debugging facility of the WINDOWS.RTM. 95 and WINDOWS.RTM. NT operating system, or their like, will suspend the target program, will load CrashGuard.TM. as the designated "debugger" into memory space not allocated to the target program, identifies the target program to CrashGuard.TM. and executes CrashGuard.TM.. CrashGuard.TM. will cause additional memory space to be added to the virtual memory of the target program. Thereafter CrashGuard.TM. will store into the additional memory space a routine that will allow the user to take such actions as to execute a Save or Save As command thereby not losing data that would otherwise have been lost.

    摘要翻译： 本发明是一种用于控制在诸如WINDOWS TM 95和WINDOWS TM NT操作系统等操作系统下运行的计算机的操作的装置和计算机方法，其不需要在操作系统下运行的程序中的占用空间 。 以下称为CrashGuard TM的程序被存储并安装在计算机中，从而被建立为用户系统中的“调试器”。 一旦这样建立，CrashGuard TM可能存储在其他地方，然后是计算机内存。 每当发生致命错误时，WINDOWS TM 95和WINDOWS TM NT操作系统或其类似的“即时”调试工具将暂停目标程序，将将CrashGuard TM作为指定的“调试器”加载到未分配的内存空间中 到目标程序，将目标程序识别为CrashGuard TM并执行CrashGuard TM。 CrashGuard TM将导致额外的内存空间添加到目标程序的虚拟内存中。 此后，CrashGuard TM将在附加存储空间中存储一个例程，该例程将允许用户执行“执行保存或另存为”命令的操作，从而不会丢失否则将丢失的数据。