利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

1685 条记录 (耗时 0.026 秒)

    Automating trust in software upgrades
    1.
    发明授权
    Automating trust in software upgrades 有权

    公开(公告)号：US12107896B2

    公开(公告)日：2024-10-01

    申请号：US17560599

    申请日：2021-12-23

    申请人： Cisco Technology, Inc.

    发明人： Jeffrey G. Schutt ,  Max Pritikin

    IPC分类号： H04L9/40 ,  G06F8/65 ,  G06F21/56 ,  G06F21/57 ,  G06N3/09 ,  G06N20/00 ,  G06F8/71 ,  G06F21/51

    CPC分类号： H04L63/20 ,  G06F8/65 ,  G06F21/563 ,  G06F21/566 ,  G06F21/577 ,  G06N3/09 ,  G06N20/00 ,  G06F8/71 ,  G06F21/51

    摘要： A method, computer system, and computer program product are provided for automatically analyzing software packages to identify the degree of differences between compared software packages and to apply security policies. A first software bill of materials for a software package is processed to extract a plurality of components of the software package, wherein the first software bill of materials indicates a first hierarchy of components based on relationships between components. The first hierarchy is compared to a second hierarchy, the second hierarchy corresponding to a second software bill of materials, to determine a degree of difference between the first hierarchy and the second hierarchy. The degree of difference is compared to one or more threshold values. A security policy is applied with respect to the software package according to a comparison of the degree of difference to the one or more threshold values.

    AUTOMATIC GENERATION OF MALWARE DETECTION TRAPS
    2.
    发明公开
    AUTOMATIC GENERATION OF MALWARE DETECTION TRAPS 审中-公开

    公开(公告)号：US20240320339A1

    公开(公告)日：2024-09-26

    申请号：US18735835

    申请日：2024-06-06

    申请人： Commvault Systems, Inc.

    发明人： Oleg GOLDSHMIDT ,  Mori BENECH

    IPC分类号： G06F21/56 ,  G06F21/51 ,  G06F21/55 ,  G06F21/57

    CPC分类号： G06F21/566 ,  G06F21/51 ,  G06F21/554 ,  G06F21/577 ,  G06F2221/034 ,  G06F2221/2125

    摘要： A system and method of deployment of malware detection traps by at least one processor may include performing a first interrogation of a first Network Asset (NA) of a specific NA family; determining, based on the interrogation, a value of one or more first NA property data elements of the first NA; obtaining one or more second NA property data elements corresponding to the specific NA family; integrating the one or more first NA property data elements and the one or more second NA property data elements to generate a template data element, corresponding to the specific NA family; producing, from the template data element, a malware detection trap module; and deploying, on one or more computing devices of a computer network, one or more instantiations of the malware detection trap module as decoys of the first NA.

    Securely redirecting system service routines
    4.
    发明授权
    Securely redirecting system service routines 有权

    公开(公告)号：US12086237B2

    公开(公告)日：2024-09-10

    申请号：US17557643

    申请日：2021-12-21

    申请人： Microsoft Technology Licensing, LLC

    发明人： Haim Cohen ,  Graham John Harper ,  Mehmet Iyigun ,  Kenneth D. Johnson

    IPC分类号： G06F21/51 ,  G06F21/31 ,  G06F21/52 ,  G06F21/53 ,  G06F21/54 ,  G06F21/57 ,  G06F21/64 ,  G06F21/79

    CPC分类号： G06F21/54 ,  G06F21/31 ,  G06F21/64 ,  G06F21/79

    摘要： Securely redirecting a system service routine via a provider service table. A service call provider is loaded within an operating system executing in a lower trust security zone. The service call provider comprises metadata indicating a system service routine to be redirected to the service call provider. Based on the metadata, a provider service table is built within a higher trust security zone. The service table redirects the system service routine to the service call provider. Memory page(s) associated with the provider service table are hardware protected, and a read-only view is exposed to the operating system. The provider service table is associated with a user-mode process. A service call for a particular system service routine is received by the operation system from the user-mode process and, based on the provider service table being associated with the user-mode process, the service call is directed to the service call provider.

    MANAGING THE LOADING OF SENSITIVE MODULES
    7.
    发明公开
    MANAGING THE LOADING OF SENSITIVE MODULES 审中-公开

    公开(公告)号：US20240220637A1

    公开(公告)日：2024-07-04

    申请号：US18608098

    申请日：2024-03-18

    申请人： Open Text Inc.

    发明人： John R. Shaw, II ,  Andrew L. Sandoval

    IPC分类号： G06F21/57 ,  G06F21/51 ,  G06F21/55 ,  G06F21/60

    CPC分类号： G06F21/577 ,  G06F21/51 ,  G06F21/552 ,  G06F21/604

    摘要： The present disclosure relates to systems and methods for identifying highly sensitive modules and taking a remediation or preventative action if such modules are accessed by malicious software. For example, the likelihood that a module is used for an exploit, and is thus sensitive, is categorized as high, medium, or low. The likelihood that a module can be used for an exploit can dictate whether, and to what degree, an application accessing the module is “suspicious.” However, in some instances, a sensitive module may have legitimate reasons to load when used in certain non-malicious ways. The system may also consider a trust level when determining what actions to take, such that an application and/or user having a higher trust level may be less suspicious when accessing a sensitive module as compared to an application or user having a lower trust level.