专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

31. 发明申请

US20130086383A1 VIRTUAL MACHINE IMAGES ENCRYPTION USING TRUSTED COMPUTING GROUP SEALING 有权
标题翻译：虚拟机图像加密使用有争议的计算机组密封
公开(公告)号：US20130086383A1
公开(公告)日：2013-04-04
申请号：US13252713
申请日：2011-10-04
申请人： Rajiv Augusto Santos Galvao de Andrade , Steven A. Bade , Jeb R. Linton , Dimitrios Pendarakis , George C. Wilson , Lee H. Wilson
发明人： Rajiv Augusto Santos Galvao de Andrade , Steven A. Bade , Jeb R. Linton , Dimitrios Pendarakis , George C. Wilson , Lee H. Wilson
IPC分类号： H04L9/08 , H04L9/32
CPC分类号： H04L9/0897 , G06F21/57
摘要： A host machine provisions a virtual machine from a catalog of stock virtual machines. The host machine instantiates the virtual machine. The host machine configures the virtual machine, based on customer inputs, to form a customer's configured virtual machine. The host machine creates an image from the customer's configured virtual machine. The host machine unwraps a sealed customer's symmetric key to form a customer's symmetric key. The host machine encrypts the customer's configured virtual machine with the customer's symmetric key to form an encrypted configured virtual machine. The host machine stores the encrypted configured virtual machine to non-volatile storage.
摘要翻译：主机从虚拟机目录中提供虚拟机。主机实例化虚拟机。主机根据客户输入配置虚拟机，形成客户配置的虚拟机。主机从客户配置的虚拟机创建映像。主机打开密封客户的对称密钥，形成客户的对称密钥。主机使用客户的对称密钥加密客户配置的虚拟机，形成加密配置的虚拟机。主机将加密的配置虚拟机存储到非易失性存储。

32. 发明申请

US20110258610A1 OPTIMIZING PERFORMANCE OF INTEGRITY MONITORING 有权
标题翻译：优化性能监测
公开(公告)号：US20110258610A1
公开(公告)日：2011-10-20
申请号：US12761952
申请日：2010-04-16
申请人： Najwa Aaraj , Mihai Christodorescu , Dimitrios Pendarakis , Reiner Sailer , Douglas L. Schales
发明人： Najwa Aaraj , Mihai Christodorescu , Dimitrios Pendarakis , Reiner Sailer , Douglas L. Schales
IPC分类号： G06F11/30 , G06F9/44
CPC分类号： G06F21/566 , G06F21/554 , G06F21/563
摘要： A system, method and computer program product for verifying integrity of a running application program on a computing device. The method comprises: determining entry points into an application programs processing space that impact proper execution impact program integrity; mapping data elements reachable from the determined entry points into a memory space of a host system where the application to verify is running; run-time monitoring, in the memory space, potential modification of the data elements in a manner potentially breaching program integrity; and initiating a response to the potential modification. The run-time monitoring detects when a data transaction, e.g., a write event, reaches a malicious agent's entry point, a corresponding memory hook is triggered and control is passed to a security agent running outside the monitored system. This agent requests the values of the data elements, and determines if invariants that have been previously computed hold true or not under the set of retrieved data values.
摘要翻译：一种用于验证计算设备上正在运行的应用程序的完整性的系统，方法和计算机程序产品。该方法包括：将入口点确定为影响适当执行影响程序完整性的应用程序处理空间; 将从所确定的入口点到达的数据元素映射到要验证的应用正在运行的主机系统的存储器空间中; 在存储器空间中的运行时监视，以潜在地破坏程序完整性的方式潜在地修改数据元素; 并启动对潜在修改的响应。运行时监视检测数据事务（例如写入事件）何时到达恶意代理的入口点，触发对应的存储器钩子，并将控制传递到在被监视系统外部运行的安全代理。该代理请求数据元素的值，并确定先前计算的不变量是否在检索的数据值集合下保持为真。

33. 发明申请

US20090235324A1 METHOD FOR DISCOVERING A SECURITY POLICY 有权
标题翻译：发现安全政策的方法
公开(公告)号：US20090235324A1
公开(公告)日：2009-09-17
申请号：US12049629
申请日：2008-03-17
申请人： John L. Griffin , Dimitrios Pendarakis , Ronald Perez , Reiner Sailer , Enriquillo Valdez
发明人： John L. Griffin , Dimitrios Pendarakis , Ronald Perez , Reiner Sailer , Enriquillo Valdez
IPC分类号： G06F17/00
CPC分类号： G06F21/629 , G06F21/53 , G06F21/55 , G06F21/552 , G06F21/577 , G06F21/604 , H04L63/102 , H04L63/1408 , H04L63/20 , H04L67/00 , H04L67/10 , H04W12/08
摘要： Techniques for mapping at least one physical system and at least one virtual system into at least two separate execution environments are provided. The techniques include discovering an implicitly enforced security policy in an environment comprising at least one physical system and at least one virtual system, using the discovered policy to create an enforceable isolation policy, and using the isolation policy to map the at least one physical system and at least one virtual system into at least two separate execution environments. Techniques are also provided for generating a database of one or more isolation policies.
摘要翻译：提供了用于将至少一个物理系统和至少一个虚拟系统映射到至少两个单独的执行环境中的技术。所述技术包括在包括至少一个物理系统和至少一个虚拟系统的环境中发现隐含强制执行的安全策略，使用所发现的策略来创建可强制执行的隔离策略，以及使用所述隔离策略来映射所述至少一个物理系统和至少一个虚拟系统进入至少两个独立的执行环境。还提供了用于生成一个或多个隔离策略的数据库的技术。

34. 发明申请

US20090043893A1 Multiple Resource Control-Advisor for Management of Distributed or Web-Based Systems 失效
标题翻译：用于分布式或基于Web的系统管理的多资源控制顾问
公开(公告)号：US20090043893A1
公开(公告)日：2009-02-12
申请号：US12167183
申请日：2008-07-02
申请人： Dimitrios Pendarakis , Jeremy Silber , Laura Wynter
发明人： Dimitrios Pendarakis , Jeremy Silber , Laura Wynter
IPC分类号： G06F15/173
CPC分类号： H04L12/66
摘要： A system and method are provided for autonomic system management in a computing system containing system resources including network resources and multiple resource demands, or processes. The computing system may be a stream-processing system or other real-time computer management system, such as workload management, or a virtualization engine. The system and method enables achieving a better level of performance than would occur in the computing system using only existing mechanism. It permits, with very low computational overhead, achieving or driving the system closer to a user-defined system performance objective. To do so, a system performance equation is defined to determine a level of performance of the system as a function of the allocation of two or more system resources among a plurality of system resource demands or processes. From this system performance equation, a plurality of resource-specific change equations is derived. Each resource-specific change equation is capable of calculating changes in the level of performance of the system attributable to changes in the allocation of one of the system resources. The resource-specific change equation yielding the greatest change in the level of system performance at a given allocation of all of the system resources and the system resource associated with the identified resource-specific change equation are identified. The allocation of the identified associated system resource to at least one system resource demand to provide the largest increase in the level of performance of the system, and allocations for all system resources are adjusted in accordance with the modified allocation of the identified associated system resource.
摘要翻译：提供了一种系统和方法，用于包含系统资源，包括网络资源和多个资源需求或过程的计算系统中的自主系统管理。计算系统可以是流处理系统或其他实时计算机管理系统，例如工作负载管理或虚拟化引擎。该系统和方法能够实现比仅使用现有机制的计算系统中发生的更好的性能水平。它以非常低的计算开销允许更接近用户定义的系统性能目标来实现或驱动系统。为此，定义系统性能方程式以根据在多个系统资源需求或过程中的两个或多个系统资源的分配来确定系统的性能水平。从该系统性能方程式，导出多个资源特定变化方程。每个资源特定的变化方程能够计算由于系统资源之一的分配变化引起的系统性能水平的变化。识别在给定分配所有系统资源和与所识别的资源特定变化方程相关联的系统资源的系统性能水平上产生最大变化的资源特定变化方程。将所识别的相关联的系统资源分配给至少一个系统资源需求以提供系统性能水平的最大增加，以及针对所有系统资源的分配，根据所识别的相关系统资源的修改分配进行调整。

35. 发明申请

US20070283016A1 Multiple resource control-advisor for management of distributed or web-based systems 失效
标题翻译：用于管理分布式或基于Web的系统的多个资源控制顾问
公开(公告)号：US20070283016A1
公开(公告)日：2007-12-06
申请号：US11444162
申请日：2006-05-31
申请人： Dimitrios Pendarakis , Jeremy I. Silber , Laura Wynter
发明人： Dimitrios Pendarakis , Jeremy I. Silber , Laura Wynter
IPC分类号： G06F15/173
CPC分类号： H04L12/66
摘要： A system and method are provided for autonomic system management in a computing system containing system resources including network resources and multiple resource demands, or processes. The computing system may be a stream-processing system or other real-time computer management system, such as workload management, or a virtualization engine. The system and method enables achieving a better level of performance than would occur in the computing system using only existing mechanism. It permits, with very low computational overhead, achieving or driving the system closer to a user-defined system performance objective. To do so, a system performance equation is defined to determine a level of performance of the system as a function of the allocation of two or more system resources among a plurality of system resource demands or processes. From this system performance equation, a plurality of resource-specific change equations is derived. Each resource-specific change equation is capable of calculating changes in the level of performance of the system attributable to changes in the allocation of one of the system resources. The resource-specific change equation yielding the greatest change in the level of system performance at a given allocation of all of the system resources and the system resource associated with the identified resource-specific change equation are identified. The allocation of the identified associated system resource to at least one system resource demand to provide the largest increase in the level of performance of the system, and allocations for all system resources are adjusted in accordance with the modified allocation of the identified associated system resource.
摘要翻译：提供了一种系统和方法，用于包含系统资源，包括网络资源和多个资源需求或过程的计算系统中的自主系统管理。计算系统可以是流处理系统或其他实时计算机管理系统，例如工作负载管理或虚拟化引擎。该系统和方法能够实现比仅使用现有机制的计算系统中发生的更好的性能水平。它以非常低的计算开销允许更接近用户定义的系统性能目标来实现或驱动系统。为此，定义系统性能方程式以根据在多个系统资源需求或过程中的两个或多个系统资源的分配来确定系统的性能水平。从该系统性能方程式，导出多个资源特定变化方程。每个资源特定的变化方程能够计算由于系统资源之一的分配变化引起的系统性能水平的变化。识别在给定分配所有系统资源和与所识别的资源特定变化方程相关联的系统资源的系统性能水平上产生最大变化的资源特定变化方程。将所识别的相关联的系统资源分配给至少一个系统资源需求以提供系统性能水平的最大增加，以及针对所有系统资源的分配，根据所识别的相关系统资源的修改分配进行调整。

36. 发明申请

US20070162601A1 Method for autonomic system management using adaptive allocation of resources 失效
标题翻译：使用自适应资源分配的自主系统管理方法
公开(公告)号：US20070162601A1
公开(公告)日：2007-07-12
申请号：US11327069
申请日：2006-01-06
申请人： Dimitrios Pendarakis , Jeremy Silber , Laura Wynter
发明人： Dimitrios Pendarakis , Jeremy Silber , Laura Wynter
IPC分类号： G06F15/173
CPC分类号： G06F9/5061
摘要： An exemplary method of resource allocation is provided. A relationship is estimated between at least one controlled resource and at least one dependent parameter. A resource allocation of the at least one controlled resource is adjusted to effect a desired system goal expressed in terms of the at least one dependent parameter.
摘要翻译：提供了一种资源分配的示例性方法。在至少一个受控资源与至少一个依赖参数之间估计关系。调整至少一个受控资源的资源分配以实现以至少一个依赖参数表示的期望的系统目标。

37. 发明授权

US09846789B2 Protecting application programs from malicious software or malware 有权
公开(公告)号：US09846789B2
公开(公告)日：2017-12-19
申请号：US13226079
申请日：2011-09-06
申请人： Richard H. Boivie , Dimitrios Pendarakis
发明人： Richard H. Boivie , Dimitrios Pendarakis
IPC分类号： G06F21/00 , G06F21/74
CPC分类号： G06F21/74
摘要： An apparatus includes a memory to store a secure object comprising at least one of code and data that is encrypted when stored in the memory and a central processing unit (CPU) that is capable of executing an EnterSecureMode (esm) instruction that enables the decryption of the secure object's information when the secure object information is retrieved from the memory into the CPU. The CPU further comprises a feature to protect the secure object from code received from other software.

38. 发明申请

US20130061058A1 PROTECTING APPLICATION PROGRAMS FROM MALICIOUS SOFTWARE OR MALWARE 有权
标题翻译：保护恶意软件或恶意软件的应用程序
公开(公告)号：US20130061058A1
公开(公告)日：2013-03-07
申请号：US13226079
申请日：2011-09-06
申请人： Richard Harold Boivie , Dimitrios Pendarakis
发明人： Richard Harold Boivie , Dimitrios Pendarakis
IPC分类号： G06F12/14
CPC分类号： G06F21/74
摘要： An apparatus includes a memory to store a secure object comprising at least one of code and data that is encrypted when stored in the memory and a central processing unit (CPU) that is capable of executing an EnterSecureMode (esm) instruction that enables the decryption of the secure object's information when the secure object information is retrieved from the memory into the CPU. The CPU further comprises a feature to protect the secure object from code received from other software.
摘要翻译：一种装置包括存储器，用于存储安全对象，该安全对象包括当存储在存储器中时被加密的代码和数据中的至少一个以及能够执行EnterSecureMode（esm）指令的中央处理单元（CPU）当将安全对象信息从存储器检索到CPU时，该安全对象的信息。 CPU还包括保护安全对象免受其他软件接收的代码的特征。

39. 发明授权

US07953856B2 Multiple resource control-advisor for management of distributed or web-based systems 失效
标题翻译：用于管理分布式或基于Web的系统的多个资源控制顾问
公开(公告)号：US07953856B2
公开(公告)日：2011-05-31
申请号：US12167183
申请日：2008-07-02
申请人： Dimitrios Pendarakis , Jeremy I. Silber , Laura Wynter
发明人： Dimitrios Pendarakis , Jeremy I. Silber , Laura Wynter
IPC分类号： G06F15/173
CPC分类号： H04L12/66
摘要： A system and method are provided for autonomic system management in a computing system containing system resources including network resources and multiple resource demands, or processes. The computing system may be a stream-processing system or other real-time computer management system, such as workload management, or a virtualization engine. The system and method enables achieving a better level of performance than would occur in the computing system using only existing mechanism. It permits, with very low computational overhead, achieving or driving the system closer to a user-defined system performance objective. To do so, a system performance equation is defined to determine a level of performance of the system as a function of the allocation of two or more system resources among a plurality of system resource demands or processes. From this system performance equation, a plurality of resource-specific change equations is derived. Each resource-specific change equation is capable of calculating changes in the level of performance of the system attributable to changes in the allocation of one of the system resources. The resource-specific change equation yielding the greatest change in the level of system performance at a given allocation of all of the system resources and the system resource associated with the identified resource-specific change equation are identified. The allocation of the identified associated system resource to at least one system resource demand to provide the largest increase in the level of performance of the system, and allocations for all system resources are adjusted in accordance with the modified allocation of the identified associated system resource.
摘要翻译：提供了一种系统和方法，用于包含系统资源，包括网络资源和多个资源需求或过程的计算系统中的自主系统管理。计算系统可以是流处理系统或其他实时计算机管理系统，例如工作负载管理或虚拟化引擎。该系统和方法能够实现比仅使用现有机制的计算系统中发生的更好的性能水平。它以非常低的计算开销允许更接近用户定义的系统性能目标来实现或驱动系统。为此，定义系统性能方程式以根据在多个系统资源需求或过程中的两个或多个系统资源的分配来确定系统的性能水平。从该系统性能方程式，导出多个资源特定变化方程。每个资源特定的变化方程能够计算由于系统资源之一的分配变化引起的系统性能水平的变化。识别在给定分配所有系统资源和与所识别的资源特定变化方程相关联的系统资源的系统性能水平上产生最大变化的资源特定变化方程。将所识别的相关联的系统资源分配给至少一个系统资源需求以提供系统性能水平的最大增加，以及针对所有系统资源的分配，根据所识别的相关系统资源的修改分配进行调整。

40. 发明授权

US08949797B2 Optimizing performance of integrity monitoring 有权
标题翻译：优化完整性监控的性能
公开(公告)号：US08949797B2
公开(公告)日：2015-02-03
申请号：US12761952
申请日：2010-04-16
申请人： Najwa Aaraj , Mihai Christodorescu , Dimitrios Pendarakis , Reiner Sailer , Douglas L. Schales
发明人： Najwa Aaraj , Mihai Christodorescu , Dimitrios Pendarakis , Reiner Sailer , Douglas L. Schales
IPC分类号： G06F9/44 , G06F9/45 , G06F21/56 , G06F21/55
CPC分类号： G06F21/566 , G06F21/554 , G06F21/563
摘要： A system, method and computer program product for verifying integrity of a running application program on a computing device. The method comprises: determining entry points into an application programs processing space that impact proper execution impact program integrity; mapping data elements reachable from the determined entry points into a memory space of a host system where the application to verify is running; run-time monitoring, in the memory space, potential modification of the data elements in a manner potentially breaching program integrity; and initiating a response to the potential modification. The run-time monitoring detects when a data transaction, e.g., a write event, reaches a malicious agent's entry point, a corresponding memory hook is triggered and control is passed to a security agent running outside the monitored system. This agent requests the values of the data elements, and determines if invariants that have been previously computed hold true or not under the set of retrieved data values.
摘要翻译：一种用于验证计算设备上正在运行的应用程序的完整性的系统，方法和计算机程序产品。该方法包括：将入口点确定为影响适当执行影响程序完整性的应用程序处理空间; 将从所确定的入口点到达的数据元素映射到要验证的应用正在运行的主机系统的存储器空间中; 在存储器空间中的运行时监视，以潜在地破坏程序完整性的方式潜在地修改数据元素; 并启动对潜在修改的响应。运行时监视检测数据事务（例如写入事件）何时到达恶意代理的入口点，触发对应的存储器钩子，并将控制传递到在被监视系统外部运行的安全代理。该代理请求数据元素的值，并确定先前计算的不变量是否在检索的数据值集合之前成立。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式