会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 2. 发明申请
    • Runtime Enforcement Of Security Checks
    • 运行时执行安全检查
    • US20120174229A1
    • 2012-07-05
    • US12983407
    • 2011-01-03
    • Marco PistoiaOmer TrippMartin Vechev
    • Marco PistoiaOmer TrippMartin Vechev
    • G06F11/00
    • H04L63/1441G06F21/554
    • A method is disclosed that includes tracking untrusted inputs through an executing program into a sink, the tracking including maintaining context of the sink as strings based on the untrusted inputs flow into the sink. The method also includes, while tracking, in response to a string based on an untrusted input being about to flow into the sink and a determination the string could lead to an attack if the string flows into a current context of the sink, endorsing the string using an endorser selected based at least on the current context of the sink, and providing the endorsed string to the sink. Computer program products and apparatus are also disclosed.
    • 公开了一种方法,其包括通过执行程序将不可信任的输入跟踪到宿中,所述跟踪包括基于所述不可信任的输入流入宿来维持宿的上下文作为字符串。 该方法还包括响应于基于不可信输入的字符串的跟踪而被跟踪,并且如果字符串流入接收器的当前上下文,则确定该字符串可能导致攻击,认证字符串 使用至少基于汇的当前上下文选择的支持者,并将批准的字符串提供给汇点。 还公开了计算机程序产品和装置。
    • 4. 发明授权
    • Runtime enforcement of security checks
    • 运行时执行安全检查
    • US08646088B2
    • 2014-02-04
    • US12983407
    • 2011-01-03
    • Marco PistoiaOmer TrippMartin VechevEran Yahav
    • Marco PistoiaOmer TrippMartin VechevEran Yahav
    • G06F21/00
    • H04L63/1441G06F21/554
    • A method is disclosed that includes tracking untrusted inputs through an executing program into a sink, the tracking including maintaining context of the sink as strings based on the untrusted inputs flow into the sink. The method also includes, while tracking, in response to a string based on an untrusted input being about to flow into the sink and a determination the string could lead to an attack if the string flows into a current context of the sink, endorsing the string using an endorser selected based at least on the current context of the sink, and providing the endorsed string to the sink. Computer program products and apparatus are also disclosed.
    • 公开了一种方法,其包括通过执行程序将不可信任的输入跟踪到宿中,所述跟踪包括基于所述不可信任的输入流入宿来维持宿的上下文作为字符串。 该方法还包括响应于基于不可信输入的字符串的跟踪而被跟踪,并且如果字符串流入接收器的当前上下文,则确定该字符串可能导致攻击,认证字符串 使用至少基于汇的当前上下文选择的支持者,并将批准的字符串提供给汇点。 还公开了计算机程序产品和装置。