专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US10956184B2 On-demand disposable virtual work system 有权
公开(公告)号：US10956184B2
公开(公告)日：2021-03-23
申请号：US15795977
申请日：2017-10-27
申请人： George Mason Research Foundation, Inc.
发明人： Anup K. Ghosh , Sushil Jajodia , Yih Huang , Jiang Wang
IPC分类号： G06F9/455 , G06F21/53
摘要： An on-demand disposable virtual work system that includes: a virtual machine monitor to host virtual machines, a virtual machine pool manager, a host operating system, a host program permissions list, and a request handler module. The virtual machine pool manager manages virtual machine resources. The host operating system interfaces with a user and virtual machines created with an image of a reference operating system. The host program permissions list may be a black list and/or a white list used to indicate allowable programs. The request handler module allows execution of the program if the program is allowable. If the program is not allowable, the host request handler module: denies program execution and urges a virtual machine specified by the virtual machine pool manager to execute the program. The virtual machine is terminated when the program closes.

2. 发明授权

US10567414B2 Methods and apparatus for application isolation 有权
公开(公告)号：US10567414B2
公开(公告)日：2020-02-18
申请号：US16250006
申请日：2019-01-17
申请人： George Mason Research Foundation, Inc.
发明人： Anup Ghosh , Yih Huang , Jiang Wang , Angelos Stavrou
IPC分类号： H04L29/06 , G06F21/55 , G06F9/455 , G06F21/53
摘要： Processor(s) for detecting malicious software. A hardware virtual machine monitor (HVMM) operates under a host OS. Container(s) initialized with network application template(s) operate under a guest OS VM. A detection module operates under the guest OS VM includes a trigger detection module, a logging module and a container command module. The trigger detection module monitors activity on container(s) for a trigger event. The logging module writes activity report(s) in response to trigger event(s). The container command module issues command(s) in response to trigger event(s). The command(s) include a container start, stop and revert commands. A virtual machine control console operates under the host OS and starts/stops the HVMM. A container control module operates under the guest OSVM and controls container(s) in response to the command(s). The server communication module sends activity report(s) to a central collection network appliance that maintains a repository of activities for infected devices.

3. 发明授权

US09270697B2 Hardware-assisted integrity monitor 有权
标题翻译：硬件辅助完整性监控
公开(公告)号：US09270697B2
公开(公告)日：2016-02-23
申请号：US14466237
申请日：2014-08-22
申请人： GEORGE MASON RESEARCH FOUNDATION, INC.
发明人： Anup K. Ghosh , Kun Sun , Jiang Wang , Angelos Stavrou
IPC分类号： G06F15/173 , G06F11/00 , H04L29/06 , G06F21/57 , G06F9/455
CPC分类号： H04L63/1441 , G06F9/45558 , G06F21/575 , G06F2009/45587 , G06F2221/2105
摘要： A hardware-assisted integrity monitor may include one or more target machines and/or monitor machines. A target machine may include one or more processors, which may include one or more system management modes (SMM). A SMM may include one or more register checking modules, which may be configured to determine one or more current CPU register states. A SMM may include one or more acquiring modules, which may be configured to determine one or more current memory states. A SMM may include one or more network modules, which may be configured to direct one or more communications, for example of one or more current CPU register states and/or current memory states, to a monitor machine. A monitor machine may include one or more network modules and/or analysis modules. An analysis module may be configured to determine memory state differences and/or determine CPU register states differences.
摘要翻译：硬件辅助完整性监视器可以包括一个或多个目标机器和/或监视器机器。目标机器可以包括一个或多个处理器，其可以包括一个或多个系统管理模式（SMM）。 SMM可以包括一个或多个寄存器检查模块，其可以被配置为确定一个或多个当前CPU寄存器状态。 SMM可以包括一个或多个获取模块，其可以被配置为确定一个或多个当前存储器状态。 SMM可以包括一个或多个网络模块，其可以被配置为将一个或多个通信（例如一个或多个当前CPU寄存器状态和/或当前存储器状态）引导到监视器机器。监视器机器可以包括一个或多个网络模块和/或分析模块。分析模块可以被配置为确定存储器状态差异和/或确定CPU寄存器状态差异。

4. 发明授权

US10187417B2 Methods and apparatus for application isolation 有权
公开(公告)号：US10187417B2
公开(公告)日：2019-01-22
申请号：US15841913
申请日：2017-12-14
申请人： George Mason Research Foundation, Inc.
发明人： Anup Ghosh , Yih Huang , Jiang Wang , Angelos Stavrou
IPC分类号： H04L29/06 , G06F21/55 , G06F9/455 , G06F21/53
摘要： Processor(s) for detecting malicious software. A hardware virtual machine monitor (HVMM) operates under a host OS. Container(s) initialized with network application template(s) operate under a guest OS VM. A detection module operates under the guest OS VM includes a trigger detection module, a logging module and a container command module. The trigger detection module monitors activity on container(s) for a trigger event. The logging module writes activity report(s) in response to trigger event(s). The container command module issues command(s) in response to trigger event(s). The command(s) include a container start, stop and revert commands. A virtual machine control console operates under the host OS and starts/stops the HVMM. A container control module operates under the guest OSVM and controls container(s) in response to the command(s). The server communication module sends activity report(s) to a central collection network appliance that maintains a repository of activities for infected devices.

5. 发明授权

US10120998B2 Virtual browsing environment 有权
公开(公告)号：US10120998B2
公开(公告)日：2018-11-06
申请号：US15249975
申请日：2016-08-29
申请人： George Mason Research Foundation, Inc.
发明人： Anup K. Ghosh , Sushil Jajodia , Yih Huang , Jiang Wang
IPC分类号： G06F21/53 , H04L29/06 , G06F9/54
摘要： An embodiment for providing a secure virtual browsing environment includes creating a virtual browsing environment with a virtualized operating system sharing an operating system kernel of a supporting operating system and executing the browser application within the virtual browsing environment. Another embodiment includes receiving a website selection within a browser application, determining if the website selection corresponds to a secure bookmark, and creating a second virtual browsing environment and executing the browser application within the second virtual browsing environment to access the website selection when the website selection corresponds to a website specified as a secure bookmark. Yet another embodiment includes monitoring operation of the operating system within the at least one virtual browsing environment, determining when the operation of the operating system includes potential malicious activity, and terminating the virtual browsing environment when the operation includes potential malicious activity.

6. 发明授权

US09436822B2 Virtual browsing environment 有权
标题翻译：虚拟浏览环境
公开(公告)号：US09436822B2
公开(公告)日：2016-09-06
申请号：US14480657
申请日：2014-09-09
申请人： George Mason Research Foundation, Inc.
发明人： Anup K. Ghosh , Sushil Jajodia , Yih Huang , Jiang Wang
IPC分类号： G06F21/53 , G06F21/56 , H04L29/06 , G06F9/54
CPC分类号： G06F21/53 , G06F9/54 , G06F21/56 , G06F21/568 , G06F2209/541 , G06F2221/034 , H04L63/1408 , H04L63/1483
摘要： An embodiment for providing a secure virtual browsing environment includes creating a virtual browsing environment with a virtualized operating system sharing an operating system kernel of a supporting operating system and executing the browser application within the virtual browsing environment. Another embodiment includes receiving a website selection within a browser application, determining if the website selection corresponds to a secure bookmark, and creating a second virtual browsing environment and executing the browser application within the second virtual browsing environment to access the website selection when the website selection corresponds to a website specified as a secure bookmark. Yet another embodiment includes monitoring operation of the operating system within the at least one virtual browsing environment, determining when the operation of the operating system includes potential malicious activity, and terminating the virtual browsing environment when the operation includes potential malicious activity.
摘要翻译：用于提供安全虚拟浏览环境的实施例包括利用共享支持操作系统的操作系统内核并在虚拟浏览环境中执行浏览器应用的虚拟操作系统创建虚拟浏览环境。另一个实施例包括在浏览器应用程序内接收网站选择，确定网站选择是否对应于安全书签，以及创建第二虚拟浏览环境并在第二虚拟浏览环境中执行浏览器应用程序以在网站选择时访问网站选择对应于指定为安全书签的网站。另一个实施例包括在至少一个虚拟浏览环境中监视操作系统的操作，确定操作系统的操作何时包括潜在的恶意活动，以及当操作包括潜在的恶意活动时终止虚拟浏览环境。

7. 发明授权

US11310252B2 Methods and apparatus for application isolation 有权
公开(公告)号：US11310252B2
公开(公告)日：2022-04-19
申请号：US16789973
申请日：2020-02-13
申请人： George Mason Research Foundation, Inc.
发明人： Anup Ghosh , Yih Huang , Jiang Wang , Angelos Stavrou
IPC分类号： H04L29/06 , G06F21/00 , G06F21/55 , G06F9/455 , G06F21/53
摘要： Processor(s) for detecting malicious software. A hardware virtual machine monitor (HVMM) operates under a host OS. Container(s) initialized with network application template(s) operate under a guest OS VM. A detection module operates under the guest OS VM includes a trigger detection module, a logging module and a container command module. The trigger detection module monitors activity on container(s) for a trigger event. The logging module writes activity report(s) in response to trigger event(s). The container command module issues command(s) in response to trigger event(s). The command(s) include a container start, stop and revert commands. A virtual machine control console operates under the host OS and starts/stops the HVMM. A container control module operates under the guest OSVM and controls container(s) in response to the command(s). The server communication module sends activity report(s) to a central collection network appliance that maintains a repository of activities for infected devices.

8. 发明授权

US09871812B2 Methods and apparatus for application isolation 有权
公开(公告)号：US09871812B2
公开(公告)日：2018-01-16
申请号：US15459563
申请日：2017-03-15
申请人： George Mason Research Foundation, Inc.
发明人： Anup Ghosh , Yih Huang , Jiang Wang , Angelos Stavrou
IPC分类号： H04L29/06 , G06F21/53 , G06F21/55 , G06F9/455
CPC分类号： H04L63/1425 , G06F9/45545 , G06F21/53 , G06F21/55 , G06F21/554 , G06F2009/45591 , G06F2221/034 , G06F2221/2149 , H04L63/1416
摘要： Processor(s) for detecting malicious software. A hardware virtual machine monitor (HVMM) operates under a host OS. Container(s) initialized with network application template(s) operate under a guest OS VM. A detection module operates under the guest OS VM includes a trigger detection module, a logging module and a container command module. The trigger detection module monitors activity on container(s) for a trigger event. The logging module writes activity report(s) in response to trigger event(s). The container command module issues command(s) in response to trigger event(s). The command(s) include a container start, stop and revert commands. A virtual machine control console operates under the host OS and starts/stops the HVMM. A container control module operates under the guest OS VM and controls container(s) in response to the command(s). The server communication module sends activity report(s) to a central collection network appliance that maintains a repository of activities for infected devices.

9. 发明授权

US09846588B2 On-demand disposable virtual work system 有权
公开(公告)号：US09846588B2
公开(公告)日：2017-12-19
申请号：US14482786
申请日：2014-09-10
申请人： George Mason Research Foundation, Inc.
发明人： Anup K. Ghosh , Sushil Jajodia , Yih Huang , Jiang Wang
IPC分类号： G06F9/455 , G06F21/53
CPC分类号： G06F9/45533 , G06F9/45558 , G06F21/53 , G06F2009/45562 , G06F2009/45575
摘要： An on-demand disposable virtual work system that includes: a virtual machine monitor to host virtual machines, a virtual machine pool manager, a host operating system, a host program permissions list, and a request handler module. The virtual machine pool manager manages virtual machine resources. The host operating system interfaces with a user and virtual machines created with an image of a reference operating system. The host program permissions list may be a black list and/or a white list used to indicate allowable programs. The request handler module allows execution of the program if the program is allowable. If the program is not allowable, the host request handler module: denies program execution and urges a virtual machine specified by the virtual machine pool manager to execute the program. The virtual machine is terminated when the program closes.

10. 发明授权

US09602524B2 Methods and apparatus for application isolation 有权
公开(公告)号：US09602524B2
公开(公告)日：2017-03-21
申请号：US14808681
申请日：2015-07-24
申请人： George Mason Research Foundation, Inc.
发明人： Anup Ghosh , Yih Huang , Jiang Wang , Angelos Stavrou
IPC分类号： H04L29/06 , G06F21/55
CPC分类号： H04L63/1425 , G06F9/45545 , G06F21/53 , G06F21/55 , G06F21/554 , G06F2009/45591 , G06F2221/034 , G06F2221/2149 , H04L63/1416
摘要： Processor(s) for detecting malicious software. A hardware virtual machine monitor (HVMM) operates under a host OS. Container(s) initialized with network application template(s) operate under a guest OS VM. A detection module operates under the guest OS VM includes a trigger detection module, a logging module and a container command module. The trigger detection module monitors activity on container(s) for a trigger event. The logging module writes activity report(s) in response to trigger event(s). The container command module issues command(s) in response to trigger event(s). The command(s) include a container start, stop and revert commands. A virtual machine control console operates under the host OS and starts/stops the HVMM. A container control module operates under the guest OSVM and controls container(s) in response to the command(s). The server communication module sends activity report(s) to a central collection network appliance that maintains a repository of activities for infected devices.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式