GB2614962A - Adaptive security for resource constraint devices - Google Patents

Adaptive security for resource constraint devices Download PDF

Info

Publication number
GB2614962A
GB2614962A GB2218403.0A GB202218403A GB2614962A GB 2614962 A GB2614962 A GB 2614962A GB 202218403 A GB202218403 A GB 202218403A GB 2614962 A GB2614962 A GB 2614962A
Authority
GB
United Kingdom
Prior art keywords
security
value
cyberattack
locs
measure
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
GB2218403.0A
Other languages
English (en)
Other versions
GB202218403D0 (en
Inventor
Scheideler Tim
Seul Matthias
Udupi Raghavendra Arjun
giovannini Andrea
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Kyndryl Inc
Original Assignee
Kyndryl Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Kyndryl Inc filed Critical Kyndryl Inc
Publication of GB202218403D0 publication Critical patent/GB202218403D0/en
Publication of GB2614962A publication Critical patent/GB2614962A/en
Pending legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1433—Vulnerability analysis
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/552—Detecting local intrusion or implementing counter-measures involving long-term monitoring or reporting
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/554—Detecting local intrusion or implementing counter-measures involving event detection and direct action
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
    • G06F21/566—Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • G06F21/577—Assessing vulnerabilities and evaluating computer system security
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/46—Multiprogramming arrangements
    • G06F9/50—Allocation of resources, e.g. of the central processing unit [CPU]
    • G06F9/5061—Partitioning or combining of resources
    • G06F9/5077—Logical partitioning of resources; Management or configuration of virtualized resources
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/03—Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
    • G06F2221/034—Test or assess a computer or a system

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Computer Hardware Design (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computing Systems (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Virology (AREA)
  • Storage Device Security (AREA)
  • Computer And Data Communications (AREA)
  • Debugging And Monitoring (AREA)
GB2218403.0A 2020-10-28 2021-10-07 Adaptive security for resource constraint devices Pending GB2614962A (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US17/082,348 US11539737B2 (en) 2020-10-28 2020-10-28 Adaptive security for resource constraint devices
PCT/IB2021/059206 WO2022090840A1 (en) 2020-10-28 2021-10-07 Adaptive security for resource constraint devices

Publications (2)

Publication Number Publication Date
GB202218403D0 GB202218403D0 (en) 2023-01-18
GB2614962A true GB2614962A (en) 2023-07-26

Family

ID=81257801

Family Applications (1)

Application Number Title Priority Date Filing Date
GB2218403.0A Pending GB2614962A (en) 2020-10-28 2021-10-07 Adaptive security for resource constraint devices

Country Status (5)

Country Link
US (1) US11539737B2 (https=)
JP (1) JP7714646B2 (https=)
DE (1) DE112021004273T5 (https=)
GB (1) GB2614962A (https=)
WO (1) WO2022090840A1 (https=)

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US12235969B2 (en) 2019-05-20 2025-02-25 Securin Inc. System and method for calculating and understanding aggregation risk and systemic risk across a population of organizations with respect to cybersecurity for purposes of damage coverage, consequence management, and disaster avoidance
US11914724B2 (en) * 2020-12-24 2024-02-27 Acronis International Gmbh Systems and methods for adjusting data protection levels based on system metadata
US12353546B2 (en) * 2022-07-21 2025-07-08 Uab 360 It Method and apparatus for creating a malware detection dataset
TWI822388B (zh) * 2022-10-12 2023-11-11 財團法人資訊工業策進會 資安防護偵測規則的標示方法及資安威脅策略、技術與攻擊流程標示裝置
US20240146749A1 (en) * 2022-10-28 2024-05-02 International Business Machines Corporation Threat relevancy based on user affinity
US12483533B2 (en) * 2022-11-16 2025-11-25 The Toronto-Dominion Bank Automatic validations and prioritizations of indicators of compromise
DE102023132686A1 (de) * 2023-11-23 2025-05-28 Airbus Defence and Space GmbH Deterministische Zeitverwaltung und Zeitverwaltungseinheit für Mehrkernprozessoren
US12596802B2 (en) * 2024-03-29 2026-04-07 Dell Products L.P. Malware detection techniques

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20190104138A1 (en) * 2017-10-04 2019-04-04 New Context Services, Inc. Autonomous edge device for monitoring and threat detection
CN110191083A (zh) * 2019-03-20 2019-08-30 中国科学院信息工程研究所 面向高级持续性威胁的安全防御方法、装置与电子设备
US20200213338A1 (en) * 2018-12-31 2020-07-02 Radware, Ltd. Techniques for defensing cloud platforms against cyber-attacks
CN111385288A (zh) * 2020-02-20 2020-07-07 中国人民解放军战略支援部队信息工程大学 基于隐蔽对抗的移动目标防御时机选取方法及装置
US20200336497A1 (en) * 2019-04-18 2020-10-22 International Business Machines Corporation Detecting sensitive data exposure via logging

Family Cites Families (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1999023538A1 (en) 1997-10-28 1999-05-14 Georgia Tech Research Corporation Adaptive data security system and method
US7536724B1 (en) 2003-10-01 2009-05-19 Symantec Corporation Risk profiling for optimizing deployment of security measures
US7464171B2 (en) 2004-10-01 2008-12-09 Microsoft Corporation Effective protection of computer data traffic in constrained resource scenarios
JP2015130152A (ja) * 2013-12-06 2015-07-16 三菱電機株式会社 情報処理装置及びプログラム
US9565204B2 (en) 2014-07-18 2017-02-07 Empow Cyber Security Ltd. Cyber-security system and methods thereof
US9444829B1 (en) * 2014-07-30 2016-09-13 Symantec Corporation Systems and methods for protecting computing resources based on logical data models
EP3021546B1 (en) 2014-11-14 2020-04-01 Institut Mines-Telecom / Telecom Sudparis Selection of countermeasures against cyber attacks
US11282017B2 (en) 2015-07-11 2022-03-22 RiskRecon Inc. Systems and methods for monitoring information security effectiveness
US20170223030A1 (en) * 2016-01-29 2017-08-03 Splunk Inc. Detection of security transactions
US10009370B1 (en) * 2016-03-01 2018-06-26 EMC IP Holding Company LLC Detection and remediation of potentially malicious files
US10333965B2 (en) 2016-09-12 2019-06-25 Qualcomm Incorporated Methods and systems for on-device real-time adaptive security based on external threat intelligence inputs
JP6677623B2 (ja) * 2016-11-08 2020-04-08 株式会社日立製作所 セキュリティ対策立案支援システムおよび方法
US11997140B2 (en) * 2021-01-13 2024-05-28 Microsoft Technology Licensing, Llc Ordering security incidents using alert diversity

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20190104138A1 (en) * 2017-10-04 2019-04-04 New Context Services, Inc. Autonomous edge device for monitoring and threat detection
US20200213338A1 (en) * 2018-12-31 2020-07-02 Radware, Ltd. Techniques for defensing cloud platforms against cyber-attacks
CN110191083A (zh) * 2019-03-20 2019-08-30 中国科学院信息工程研究所 面向高级持续性威胁的安全防御方法、装置与电子设备
US20200336497A1 (en) * 2019-04-18 2020-10-22 International Business Machines Corporation Detecting sensitive data exposure via logging
CN111385288A (zh) * 2020-02-20 2020-07-07 中国人民解放军战略支援部队信息工程大学 基于隐蔽对抗的移动目标防御时机选取方法及装置

Also Published As

Publication number Publication date
US11539737B2 (en) 2022-12-27
JP2023550270A (ja) 2023-12-01
US20220131889A1 (en) 2022-04-28
JP7714646B2 (ja) 2025-07-29
GB202218403D0 (en) 2023-01-18
DE112021004273T5 (de) 2023-10-12
WO2022090840A1 (en) 2022-05-05

Similar Documents

Publication Publication Date Title
GB2614962A (en) Adaptive security for resource constraint devices
Schwarz et al. Malware guard extension: Using SGX to conceal cache attacks
US8074281B2 (en) Malware detection with taint tracking
Quist et al. Detecting the presence of virtual machines using the local data table
US20170154181A1 (en) System and method for uncovering covert timing channels
JP2023550270A5 (https=)
Schwarz et al. Malware Guard Extension: abusing Intel SGX to conceal cache attacks
SA121430011B1 (ar) نظام وطريقة للحماية من برنامج الفدية دون استخدام توقيعات أو تحديثات
GB2599568A (en) Systems and methods for calculating aggregation risk and systemic risk across a population of organizations
US20210049262A1 (en) Stack pivot exploit detection and mitigation
EP4352917A1 (en) Anomalous user activity timing determinations
Zhang et al. A comprehensive study of co-residence threat in multi-tenant public PaaS clouds
GB2582460A (en) Dynamic re-composition of patch groups using stream clustering
Koomey et al. Zombie/comatose servers redux
US11263307B2 (en) Systems and methods for detecting and mitigating code injection attacks
KR102384542B1 (ko) 위험도 분포의 상세 분석을 통한 종합 위험도 분석 방법, 장치 및 프로그램
Muthumanickam et al. Optimization of rootkit revealing system resources–A game theoretic approach
US20160197943A1 (en) System and Method for Profiling System Attacker
Saxena et al. Preventing from cross-VM side-channel attack using new replacement method
US20170193222A1 (en) Baseline Calculation for Firewalling
Rashid et al. Ai-driven cybersecurity measures for hybrid cloud environments: A framework for multi-cloud security management
CN115174223A (zh) 一种工控主机安全防护方法、系统、智能终端及存储介质
WO2022238987A1 (en) A scenario-based cyber security system and method
CN111046390B (zh) 一种协同防御补丁防护方法、装置及存储设备
Hizver et al. Cloud-based application whitelisting