公开(公告)号：US20080163374A1

公开(公告)日：2008-07-03

申请号：US11618470

申请日：2006-12-29

申请人： Justin Rogers ,  Eric M. Lawrence ,  Henry F. Bridge

发明人： Justin Rogers ,  Eric M. Lawrence ,  Henry F. Bridge

IPC分类号： G06F11/07

CPC分类号： G06F11/0748 ,  G06F11/079 ,  G06F21/577

摘要： Various embodiments detect security vulnerabilities and, responsively, can modify an affected program so that even if an exploit runs, the program's integrity can be maintained. In at least some embodiments, a local automatic vulnerability detection and response (AVD/R) component executes on a user's local machine to detect and mitigate potential vulnerabilities through the use of a shield; and, a remote automatic vulnerability detection and response (AVD/R) component executes to report perceived vulnerabilities so that one or more shields can be delivered and applied locally to mitigate perceived vulnerabilities.

摘要翻译： 各种实施例检测安全漏洞，并且响应地可以修改受影响的程序，使得即使运行漏洞，也可以维护程序的完整性。 在至少一些实施例中，本地自动漏洞检测和响应（AVD / R）组件在用户的本地机器上执行以通过使用屏蔽来检测和减轻潜在的漏洞; 并且执行远程自动漏洞检测和响应（AVD / R）组件来报告感知的漏洞，以便可以在本地传送和应用一个或多个屏蔽，以减轻感知到的漏洞。

公开(公告)号：US08453245B2

公开(公告)日：2013-05-28

申请号：US11618470

申请日：2006-12-29

申请人： Justin Rogers ,  Eric M. Lawrence ,  Henry F. Bridge

发明人： Justin Rogers ,  Eric M. Lawrence ,  Henry F. Bridge

IPC分类号： G06F11/00

CPC分类号： G06F11/0748 ,  G06F11/079 ,  G06F21/577

摘要： Various embodiments detect security vulnerabilities and, responsively, can modify an affected program so that even if an exploit runs, the program's integrity can be maintained. In at least some embodiments, a local automatic vulnerability detection and response (AVD/R) component executes on a user's local machine to detect and mitigate potential vulnerabilities through the use of a shield; and, a remote automatic vulnerability detection and response (AVD/R) component executes to report perceived vulnerabilities so that one or more shields can be delivered and applied locally to mitigate perceived vulnerabilities.

摘要翻译： 各种实施例检测安全漏洞，并且响应地可以修改受影响的程序，使得即使运行漏洞，也可以维护程序的完整性。 在至少一些实施例中，本地自动漏洞检测和响应（AVD / R）组件在用户的本地机器上执行以通过使用屏蔽来检测和减轻潜在的漏洞; 并且执行远程自动漏洞检测和响应（AVD / R）组件来报告感知的漏洞，以便可以在本地传送和应用一个或多个屏蔽，以减轻感知到的漏洞。

公开(公告)号：US08959647B2

公开(公告)日：2015-02-17

申请号：US11679651

申请日：2007-02-27

申请人： Justin Rogers ,  Eric M. Lawrence ,  Henry F. Bridge

发明人： Justin Rogers ,  Eric M. Lawrence ,  Henry F. Bridge

IPC分类号： G06F7/04

CPC分类号： G06F21/52

摘要： In various embodiments, redirection techniques can be utilized to protect against insecure functionality, to mitigate scripting vulnerabilities, and to protect vulnerable exception handlers. In at least some embodiments, a program can be protected from a security vulnerability by using a runtime shield which changes the behavior of the program while it is running. The shield effectively provides a redirection solution that addresses the vulnerability while, at the same time, does not alter the particular program's executable code.

摘要翻译： 在各种实施例中，可以利用重定向技术来防止不安全的功能，减轻脚本漏洞以及保护易受攻击的异常处理程序。 在至少一些实施例中，可以通过使用在运行时改变程序的行为的运行时屏蔽来保护程序免受安全漏洞的影响。 该屏蔽有效地提供了解决该漏洞的重定向解决方案，同时不会更改特定程序的可执行代码。

公开(公告)号：US20080209563A1

公开(公告)日：2008-08-28

申请号：US11679651

申请日：2007-02-27

申请人： Justin Rogers ,  Eric M. Lawrence ,  Henry F. Bridge

发明人： Justin Rogers ,  Eric M. Lawrence ,  Henry F. Bridge

IPC分类号： G06F11/00

CPC分类号： G06F21/52

摘要： In various embodiments, redirection techniques can be utilized to protect against insecure functionality, to mitigate scripting vulnerabilities, and to protect vulnerable exception handlers. In at least some embodiments, a program can be protected from a security vulnerability by using a runtime shield which changes the behavior of the program while it is running. The shield effectively provides a redirection solution that addresses the vulnerability while, at the same time, does not alter the particular program's executable code.

摘要翻译： 在各种实施例中，可以利用重定向技术来防止不安全的功能，减轻脚本漏洞以及保护易受攻击的异常处理程序。 在至少一些实施例中，可以通过使用在运行时改变程序的行为的运行时屏蔽来保护程序免受安全漏洞的影响。 该屏蔽有效地提供了解决该漏洞的重定向解决方案，同时不会更改特定程序的可执行代码。