INTERCEPTING DEVICES
    1.
    发明申请

    公开(公告)号:WO2020263217A1

    公开(公告)日:2020-12-30

    申请号:PCT/US2019/038736

    申请日:2019-06-24

    Abstract: In examples, apparatus for detecting malicious or rogue behaviour associated with data packets transmitted between a first device and a second device through a switch is provided, the first device having direct read/write memory access to the second device, in which the apparatus comprises an intercepting device logically intermediate the first device and the switch device to enable the apparatus to analyse the data packets to determine a communication pattern between the first and second devices, compare the communication pattern to a set of expected behaviours for the first device, select, on the basis of the comparison to the set of expected behaviours, a behaviour pattern for the first device, and map the behaviour pattern for the first device to a set of mitigating actions when the behaviour pattern for the first device is symptomatic of a malicious or rogue behaviour.

    RESPONSE TO OPERATING SYSTEM INTRUSION
    2.
    发明申请

    公开(公告)号:WO2020091922A1

    公开(公告)日:2020-05-07

    申请号:PCT/US2019/053442

    申请日:2019-09-27

    Abstract: The disclosure relates to a data processing apparatus. The data processing apparatus may comprise a memory storing a candidate service level response to an intrusion to an operating system having a plurality of operating system services. The data processing apparatus may comprise processing circuitry coupled to the memory. The data processing apparatus may comprise an output coupled to the processing circuitry. It may be that the processing circuitry is to, depending on an alert indicative of the intrusion: select from the memory, for an operating system service of the said plurality of operating systems, the said operating system service being related to the alert, the candidate service level response to the intrusion; and provide a signal to the output depending on the candidate service level response selected in respect of the said operating system service.

    EVIDENCE OF MANUFACTURING PROCESSES
    5.
    发明申请
    EVIDENCE OF MANUFACTURING PROCESSES 审中-公开
    制造过程的证据

    公开(公告)号:WO2008072009A1

    公开(公告)日:2008-06-19

    申请号:PCT/GB2007/050745

    申请日:2007-12-06

    CPC classification number: G06Q10/06

    Abstract: In order to provide evidence concerning at least one stage of a process for manufacturing an item (10), evidence is accumulated during manufacture. After manufacture of the item (10), this evidence is used by a verifying entity (30) to provide check that the item (10) has been manufactured in an acceptable manner. Both a method and an item of manufacture for use in implementing the method, are provided.

    Abstract translation: 为了提供关于制造物品(10)的过程的至少一个阶段的证据,在制造​​期间累积证据。 在项目(10)的制造之后,验证实体(30)使用该证据以可接受的方式提供项目(10)的制造。 提供了用于实现该方法的方法和制造项目。

    BIOS SECURITY
    8.
    发明申请
    BIOS SECURITY 审中-公开
    BIOS安全

    公开(公告)号:WO2018075057A1

    公开(公告)日:2018-04-26

    申请号:PCT/US2016/058047

    申请日:2016-10-21

    Abstract: Examp!es associated with basic input/output system (BiOS) security are described. One example includes detecting a mismatch between an active BiOS setting and a saved BIOS setting. An update previously applied to the active BiOS setting is validated. The update Is applied to the saved BIOS setting creating an updated BIOS setting. The saved BIOS setting is updated when the updated BIOS setting and the active BIOS setting match. The saved BIOS setting is updated to the active BIOS setting. A security action is taken when the updated BiOS setting and the active BiOS setting differ.

    Abstract translation: 描述了与基本输入/输出系统(BiOS)安全相关的示例。 一个例子包括检测活动的BiOS设置和保存的BIOS设置之间的不匹配。 以前应用于活动BiOS设置的更新将得到验证。 更新应用于保存的BIOS设置,创建更新的BIOS设置。 当更新的BIOS设置和有效的BIOS设置匹配时,更新保存的BIOS设置。 保存的BIOS设置更新为活动的BIOS设置。 当更新的BiOS设置和活动的BiOS设置不同时采取安全措施。

    SYSTEM MANAGEMENT MODE TEST OPERATIONS
    9.
    发明申请
    SYSTEM MANAGEMENT MODE TEST OPERATIONS 审中-公开
    系统管理模式测试操作

    公开(公告)号:WO2017131679A1

    公开(公告)日:2017-08-03

    申请号:PCT/US2016/015223

    申请日:2016-01-27

    CPC classification number: G06F11/2284

    Abstract: Example implementations relate to system management mode (SMM) test operations. For example, a system for SMM test operations may include a test mode initiation engine to reboot a computing device, and load an interface firmware engine into system management random access memory (SMRAM) associated with the computing device in response to the reboot, wherein the interface firmware engine includes a production interface firmware engine to perform the test operation on a known address space of the page of SMRAM. The system may include a test operation engine to cause the computing system to operate in a testing mode, wherein the testing mode includes operating the computing system in system management mode (SMM), in response to a test command, and perform a test operation on a page of system management random access memory (SMRAM) associated with the computing device when the computing device is operating in SMM.

    Abstract translation: 示例实现涉及系统管理模式(SMM)测试操作。 例如,用于SMM测试操作的系统可以包括用于重启计算设备的测试模式启动引擎,并且响应于重启,将接口固件引擎加载到与计算设备相关联的系统管理随机存取存储器(SMRAM)中,其中, 接口固件引擎包括生产接口固件引擎,以在SMRAM的页面的已知地址空间上执行测试操作。 该系统可以包括测试操作引擎,以使计算系统在测试模式下操作,其中测试模式包括响应于测试命令在系统管理模式(SMM)中操作计算系统,并且执行测试操作 当计算设备在SMM中操作时,与计算设备相关联的系统管理随机存取存储器(SMRAM)的页面。

Patent Agency Ranking