公开(公告)号：US08117441B2

公开(公告)日：2012-02-14

申请号：US11472052

申请日：2006-06-20

申请人： Thekkthalackal Varugis Kurien ,  Jeffrey B Hamblin ,  Narasimha Rao Nagampalli ,  Peter T Brundrett ,  Scott Field

发明人： Thekkthalackal Varugis Kurien ,  Jeffrey B Hamblin ,  Narasimha Rao Nagampalli ,  Peter T Brundrett ,  Scott Field

IPC分类号： H04L29/00 ,  H04L29/06

CPC分类号： G06F21/50 ,  G06F21/51 ,  G06F21/53

摘要： At computer device power on, the operating system of the computer device initiates a monitor. The monitor assigns a monitoring program to each program and object (collectively, “program”) running on the computer device to monitor the activities of the program. When the monitoring program is assigned to a program, the monitoring program is assigned an integrity and/or privacy label (collectively, “integrity label”) based on predetermined criteria applied to the monitored program. The monitoring program, in turn, assigns an integrity label to the program monitored by the monitoring program. The integrity label assigned to the monitored program is less than or equal to the integrity label of the monitoring program. The monitor enforces an integrity policy of the computer device based on the integrity label assigned to monitored programs and the integrity label associated with data, another program, or a remote network resource that the monitored program is seeking to access.

摘要翻译： 在计算机设备上电时，计算机设备的操作系统启动监视器。 监视器为在计算机设备上运行的每个程序和对象（统称为“程序”）分配监视程序，以监视程序的活动。 当监视程序被分配给程序时，基于应用于监视程序的预定标准，向监视程序分配完整性和/或隐私标签（统称为“完整性标签”）。 监控程序又向监控程序监控的程序分配一个完整性标签。 分配给被监视程序的完整性标签小于或等于监视程序的完整性标签。 监视器基于分配给被监视程序的完整性标签和与监视程序正在寻求访问的数据，另一程序或远程网络资源相关联的完整性标签来强制执行计算机设备的完整性策略。

公开(公告)号：US08347085B2

公开(公告)日：2013-01-01

申请号：US13341855

申请日：2011-12-30

申请人： Thekkthalackal Varugis Kurien ,  Jeffrey B Hamblin ,  Narasimha Rao Nagampalli ,  Peter T Brundrett ,  Scott Field

发明人： Thekkthalackal Varugis Kurien ,  Jeffrey B Hamblin ,  Narasimha Rao Nagampalli ,  Peter T Brundrett ,  Scott Field

IPC分类号： H04L29/06

CPC分类号： G06F21/50 ,  G06F21/51 ,  G06F21/53

摘要： At computer device power on, the operating system of the computer device initiates a monitor. The monitor assigns a monitoring program to each program and object (collectively, “program”) running on the computer device to monitor the activities of the program. When the monitoring program is assigned to a program, the monitoring program is assigned an integrity and/or privacy label (collectively, “integrity label”) based on predetermined criteria applied to the monitored program. The monitoring program, in turn, assigns an integrity label to the program monitored by the monitoring program. The integrity label assigned to the monitored program is less than or equal to the integrity label of the monitoring program. The monitor enforces an integrity policy of the computer device based on the integrity label assigned to monitored programs and the integrity label associated with data, another program, or a remote network resource that the monitored program is seeking to access.

摘要翻译： 在计算机设备上电时，计算机设备的操作系统启动监视器。 监视器为在计算机设备上运行的每个程序和对象（统称为程序）分配监视程序，以监视程序的活动。 当监视程序被分配给程序时，基于应用于监视程序的预定标准，向监视程序分配完整性和/或隐私标签（统称为完整性标签）。 监控程序又向监控程序监控的程序分配一个完整性标签。 分配给被监视程序的完整性标签小于或等于监视程序的完整性标签。 监视器基于分配给被监视程序的完整性标签和与监视程序正在寻求访问的数据，另一程序或远程网络资源相关联的完整性标签来强制执行计算机设备的完整性策略。