SG11201810295UA - Hardware-based virtualized security isolation - Google Patents
Hardware-based virtualized security isolationInfo
- Publication number
- SG11201810295UA SG11201810295UA SG11201810295UA SG11201810295UA SG11201810295UA SG 11201810295U A SG11201810295U A SG 11201810295UA SG 11201810295U A SG11201810295U A SG 11201810295UA SG 11201810295U A SG11201810295U A SG 11201810295UA SG 11201810295U A SG11201810295U A SG 11201810295UA
- Authority
- SG
- Singapore
- Prior art keywords
- microsoft
- llc
- washington
- redmond
- way
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
- G06F21/53—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/46—Interconnection of networks
- H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
- H04L63/1416—Event detection, e.g. attack signature detection
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1433—Vulnerability analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1441—Countermeasures against malicious traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/02—Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Computing Systems (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- General Physics & Mathematics (AREA)
- Physics & Mathematics (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Computer And Data Communications (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
WebProxy () INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) (19) World Intellectual Property Organization International Bureau (43) International Publication Date 07 December 2017 (07.12.2017) WIP0 I PCT omit VIII Holm o III OH oloimionm oimIE (10) International Publication Number WO 2017/210065 Al (51) International Patent Classification: GOOF 21/53 (2013.01) (21) International Application Number: PCT/US2017/034354 (22) International Filing Date: 25 May 2017 (25.05.2017) (25) Filing Language: English (26) Publication Language: English (30) Priority Data: 15/171,917 02 June 2016 (02.06.2016) US (71) Applicant: MICROSOFT TECHNOLOGY LI- CENSING, LLC [US/US]; One Microsoft Way, Redmond, Washington 98052-6399 (US). (72) Inventors: PAI, Navin Narayan; Microsoft Technology Licensing, LLC, One Microsoft Way, Redmond, Washing- ton 98052-6399 (US). JEFFRIES, Charles G.; Microsoft Technology Licensing, LLC, One Microsoft Way, Red- mond, Washington 98052-6399 (US). VISWANATHAN, Giridhar; Microsoft Technology Licensing, LLC, One Mi- crosoft Way, Redmond, Washington 98052-6399 (US). SCHULTZ, Benjamin M.; Microsoft Technology Licens- ing, LLC, One Microsoft Way, Redmond, Washington 98052-6399 (US). SMITH, Frederick J.; Microsoft Tech- nology Licensing, LLC, One Microsoft Way, Redmond, Washington 98052-6399 (US). REUTHER, Lars; Mi- crosoft Technology Licensing, LLC, One Microsoft Way, Redmond, Washington 98052-6399 (US). EBERSOL, Michael B.; Microsoft Technology Licensing, LLC, One Microsoft Way, Redmond, Washington 98052-6399 (US). DIAZ CUELLAR, Gerardo; Microsoft Technology Li- censing, LLC, One Microsoft Way, Redmond, Washington 98052-6399 (US). PASHOV, Ivan Dimitrov; Microsoft Technology Licensing, LLC, One Microsoft Way, Red- mond, Washington 98052-6399 (US). GADDEHOSUR, Poornananda R.; Microsoft Technology Licensing, LLC, One Microsoft Way, Redmond, Washington 98052-6399 (US). PULAPAKA, Hari R.; Microsoft Technology Li- censing, LLC, One Microsoft Way, Redmond, Washington 98052-6399 (US). RAO, Vikram Mangalore; Microsoft Technology Licensing, LLC, One Microsoft Way, Red- mond, Washington 98052-6399 (US). (74) Agent: MINHAS, Sandip et al.; Microsoft Technology Li- censing, LLC, One Microsoft Way, Redmond, Washington 98052-6399 (US). (81) Designated States (unless otherwise indicated, for every kind of national protection available): AE, AG, AL, AM, AO, AT, AU, AZ, BA, BB, BG, BH, BN, BR, BW, BY, BZ, — (54) Title: HARDWARE-BASED VIRTUALIZED SECURITY ISOLATION (57) : A host operating system miming on a computing device monitors network communications for the computing device to identify network resources that are requested by the computing device. The host operating system compares requested network resources against security policies to determine if the request- 104 - ed network resources are trusted. When an untrusted network resource is identi- fied, the host operating system accesses the untrusted network resource within a container that is isolated from the host operating system kernel using techniques 106 discussed herein. By restricting access to untrusted network resources to isolated containers, the host operating system is protected from even kernel-level attacks or infections that may result from an untrusted network resource. 102 Host Operating System HVSI Subsystem 110 Network Filter 116 Policy Manager 112 Container Manager 118 Application 114 J Security Subsystem 120 130(1) 130(n) Container ( ) Container (n 132(n) 132(1) Virtual Virtual Application Application Fig. 1 [Continued on next page] 122(1)— 122(n) Network Resource = 1 1 Network Resource Management And Monitoring Service 108 W O 20 17 / 210065 Al WO 2017/210065 Al OII CA, CH, CL, CN, CO, CR, CU, CZ, DE, DJ, DK, DM, DO, DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, GT, HN, HR, HU, ID, IL, IN, IR, IS, JP, KE, KG, KH, KN, KP, KR, KW, KZ, LA, LC, LK, LR, LS, LU, LY, MA, MD, ME, MG, MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, OM, PA, PE, PG, PH, PL, PT, QA, RO, RS, RU, RW, SA, SC, SD, SE, SG, SK, SL, SM, ST, SV, SY, TH, TJ, TM, TN, TR, TT, TZ, UA, UG, US, UZ, VC, VN, ZA, ZM, ZW. (84) Designated States (unless otherwise indicated, for every kind of regional protection available): ARIPO (BW, GH, GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, ST, SZ, TZ, UG, ZM, ZW), Eurasian (AM, AZ, BY, KG, KZ, RU, TJ, TM), European (AL, AT, BE, BG, CH, CY, CZ, DE, DK, EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, SM, TR), OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, KM, ML, MR, NE, SN, TD, TG). Declarations under Rule 4.17: as to applicant's entitlement to apply for and be granted a patent (Rule 4.17(H)) as to the applicant's entitlement to claim the priority of the earlier application (Rule 4.17(iii)) Published: — with international search report (Art. 21(3))
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US15/171,917 US10855725B2 (en) | 2016-06-02 | 2016-06-02 | Hardware-based virtualized security isolation |
PCT/US2017/034354 WO2017210065A1 (en) | 2016-06-02 | 2017-05-25 | Hardware-based virtualized security isolation |
Publications (1)
Publication Number | Publication Date |
---|---|
SG11201810295UA true SG11201810295UA (en) | 2018-12-28 |
Family
ID=59014799
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
SG11201810295UA SG11201810295UA (en) | 2016-06-02 | 2017-05-25 | Hardware-based virtualized security isolation |
Country Status (19)
Country | Link |
---|---|
US (1) | US10855725B2 (en) |
EP (1) | EP3465517B1 (en) |
JP (1) | JP6982006B2 (en) |
KR (1) | KR102386560B1 (en) |
CN (1) | CN109196505B (en) |
AU (1) | AU2017275464B2 (en) |
BR (1) | BR112018074347A8 (en) |
CA (1) | CA3023472A1 (en) |
CL (1) | CL2018003297A1 (en) |
CO (1) | CO2018012982A2 (en) |
ES (1) | ES2806379T3 (en) |
IL (1) | IL263152B (en) |
MX (1) | MX2018014912A (en) |
NZ (1) | NZ747895A (en) |
PH (1) | PH12018550196A1 (en) |
RU (1) | RU2755880C2 (en) |
SG (1) | SG11201810295UA (en) |
WO (1) | WO2017210065A1 (en) |
ZA (1) | ZA201807411B (en) |
Families Citing this family (86)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CA2908871C (en) | 2013-04-10 | 2018-02-27 | Illumio, Inc. | Distributed network management using a logical multi-dimensional label-based policy model |
US9882919B2 (en) | 2013-04-10 | 2018-01-30 | Illumio, Inc. | Distributed network security using a logical multi-dimensional label-based policy model |
WO2015175753A1 (en) * | 2014-05-14 | 2015-11-19 | Hay Peter Mcclelland | Systems and methods for ensuring computer system security via a virtualized layer of application abstraction |
US10397255B1 (en) * | 2015-09-23 | 2019-08-27 | StackRox, Inc. | System and method for providing security in a distributed computation system utilizing containers |
US11425169B2 (en) | 2016-03-11 | 2022-08-23 | Netskope, Inc. | Small-footprint endpoint data loss prevention (DLP) |
US11403418B2 (en) | 2018-08-30 | 2022-08-02 | Netskope, Inc. | Enriching document metadata using contextual information |
US11405423B2 (en) * | 2016-03-11 | 2022-08-02 | Netskope, Inc. | Metadata-based data loss prevention (DLP) for cloud resources |
US10459823B1 (en) * | 2016-06-29 | 2019-10-29 | EMC IP Holding Company LLC | Debugging using dual container images |
US10372588B2 (en) | 2016-07-08 | 2019-08-06 | International Business Machines Corporation | Providing debug information on production containers using debug containers |
US10505830B2 (en) * | 2016-08-11 | 2019-12-10 | Micro Focus Llc | Container monitoring configuration deployment |
US20180082053A1 (en) * | 2016-09-21 | 2018-03-22 | Telefonaktiebolaget Lm Ericsson (Publ) | Application token through associated container |
US10592664B2 (en) * | 2017-02-02 | 2020-03-17 | Cisco Technology, Inc. | Container application security and protection |
US11165825B2 (en) * | 2017-02-16 | 2021-11-02 | Emerald Cactus Ventures, Inc. | System and method for creating encrypted virtual private network hotspot |
US11165751B2 (en) * | 2017-02-16 | 2021-11-02 | Emerald Cactus Ventures, Inc. | System and method for establishing simultaneous encrypted virtual private networks from a single computing device |
US11122013B2 (en) | 2017-02-16 | 2021-09-14 | Emerald Cactus Ventures, Inc. | System and method for encrypting data interactions delineated by zones |
US10613885B2 (en) | 2017-02-24 | 2020-04-07 | International Business Machines Corporation | Portable aggregated information calculation and injection for application containers |
US10691816B2 (en) * | 2017-02-24 | 2020-06-23 | International Business Machines Corporation | Applying host access control rules for data used in application containers |
US10362047B2 (en) * | 2017-05-08 | 2019-07-23 | KnowBe4, Inc. | Systems and methods for providing user interfaces based on actions associated with untrusted emails |
US10719603B2 (en) * | 2017-05-16 | 2020-07-21 | Vmware, Inc. | Methods and apparatus for sandboxed code execution using containers |
US10726121B2 (en) * | 2017-05-16 | 2020-07-28 | Vmware, Inc. | Methods and apparatus for improving sandboxed code execution by caching container image templates |
WO2018226790A1 (en) * | 2017-06-09 | 2018-12-13 | ORock Holdings, LLC | Secure network-accessible system for executing remote applications |
US11240207B2 (en) * | 2017-08-11 | 2022-02-01 | L3 Technologies, Inc. | Network isolation |
US11601467B2 (en) * | 2017-08-24 | 2023-03-07 | L3 Technologies, Inc. | Service provider advanced threat protection |
US10528733B2 (en) * | 2017-08-31 | 2020-01-07 | International Business Machines Corporation | Integrity, theft protection and cyber deception using a deception-based filesystem |
US11178104B2 (en) | 2017-09-26 | 2021-11-16 | L3 Technologies, Inc. | Network isolation with cloud networks |
US10931669B2 (en) * | 2017-09-28 | 2021-02-23 | L3 Technologies, Inc. | Endpoint protection and authentication |
US11223601B2 (en) * | 2017-09-28 | 2022-01-11 | L3 Technologies, Inc. | Network isolation for collaboration software |
US11374906B2 (en) | 2017-09-28 | 2022-06-28 | L3 Technologies, Inc. | Data exfiltration system and methods |
US11184323B2 (en) * | 2017-09-28 | 2021-11-23 | L3 Technologies, Inc | Threat isolation using a plurality of containers |
US11336619B2 (en) * | 2017-09-28 | 2022-05-17 | L3 Technologies, Inc. | Host process and memory separation |
US11552987B2 (en) * | 2017-09-28 | 2023-01-10 | L3 Technologies, Inc. | Systems and methods for command and control protection |
US11170096B2 (en) | 2017-10-23 | 2021-11-09 | L3 Technologies, Inc. | Configurable internet isolation and security for mobile devices |
US11120125B2 (en) | 2017-10-23 | 2021-09-14 | L3 Technologies, Inc. | Configurable internet isolation and security for laptops and similar devices |
US11550898B2 (en) | 2017-10-23 | 2023-01-10 | L3 Technologies, Inc. | Browser application implementing sandbox based internet isolation |
US10001990B2 (en) * | 2017-10-26 | 2018-06-19 | Iomaxis, Llc | Method and system for enhancing application container and host operating system security in a multi-tenant computing environment |
US11516252B2 (en) * | 2017-10-31 | 2022-11-29 | Cable Television Laboratories, Inc. | Systems and methods for internet of things security environment |
US11503051B2 (en) | 2018-01-11 | 2022-11-15 | Perspecta Labs Inc. | Migration of traffic flows |
US10664592B2 (en) * | 2018-03-22 | 2020-05-26 | International Business Machines Corporation | Method and system to securely run applications using containers |
US11409569B2 (en) * | 2018-03-29 | 2022-08-09 | Xilinx, Inc. | Data processing system |
US20190362075A1 (en) * | 2018-05-22 | 2019-11-28 | Fortinet, Inc. | Preventing users from accessing infected files by using multiple file storage repositories and a secure data transfer agent logically interposed therebetween |
KR101959544B1 (en) * | 2018-06-01 | 2019-03-18 | 주식회사 에프원시큐리티 | Web attack detection and prevention system and method |
US11012310B2 (en) * | 2018-06-05 | 2021-05-18 | Illumio, Inc. | Managing containers based on pairing keys in a segmented network environment |
US10958480B2 (en) * | 2018-07-19 | 2021-03-23 | Vmware, Inc. | Per-app virtual private network tunnel for multiple processes |
WO2020044082A1 (en) * | 2018-08-30 | 2020-03-05 | Telefonaktiebolaget Lm Ericsson (Publ) | Method for restricting access to a management interface using standard management protocols and software |
US11036856B2 (en) * | 2018-09-16 | 2021-06-15 | Fortinet, Inc. | Natively mounting storage for inspection and sandboxing in the cloud |
US11677713B2 (en) * | 2018-10-05 | 2023-06-13 | Vmware, Inc. | Domain-name-based network-connection attestation |
CN109301936B (en) * | 2018-10-11 | 2022-03-08 | 云南电网有限责任公司红河供电局 | Intelligent substation operation and maintenance information monitoring system based on container scheduling framework |
EP3644206A1 (en) | 2018-10-22 | 2020-04-29 | Koninklijke Philips N.V. | A container builder for individualized network services |
CN109522760B (en) * | 2018-10-29 | 2020-08-14 | 北京博衍思创信息科技有限公司 | Data forwarding control method and system based on hardware control logic |
US10785166B1 (en) * | 2018-11-29 | 2020-09-22 | Cox Communications, Inc. | Resource assignment protocol-implemented policy-based direction of a client to an edge-compute resource |
US11601787B2 (en) | 2018-12-31 | 2023-03-07 | T-Mobile Usa, Inc. | Using a blockchain to determine trustworthiness of messages between vehicles over a telecommunications network |
US11329982B2 (en) | 2018-12-31 | 2022-05-10 | T-Mobile Usa, Inc. | Managing internet of things devices using blockchain operations |
US11159945B2 (en) * | 2018-12-31 | 2021-10-26 | T-Mobile Usa, Inc. | Protecting a telecommunications network using network components as blockchain nodes |
US11159322B2 (en) * | 2019-01-31 | 2021-10-26 | Baidu Usa Llc | Secure multiparty computing framework using a restricted operating environment with a guest agent |
US11775475B2 (en) | 2019-03-05 | 2023-10-03 | Microsoft Technology Licensing, Llc | Deferred path resolution during container deployment |
CN110059453B (en) * | 2019-03-13 | 2021-02-05 | 中国科学院计算技术研究所 | Container virtualization security reinforcing device and method |
US10942855B2 (en) * | 2019-03-18 | 2021-03-09 | Microsoft Technology Licensing, Llc | Contextual loading based on dynamic context |
US11190512B2 (en) | 2019-04-17 | 2021-11-30 | Microsoft Technology Licensing, Llc | Integrity attestation of attestation component |
US11392467B2 (en) | 2019-04-17 | 2022-07-19 | Microsoft Technology Licensing, Llc | Failover between decentralized identity stores |
US11429743B2 (en) | 2019-04-29 | 2022-08-30 | Microsoft Technology Licensing, Llc | Localization of DID-related claims and data |
US11381567B2 (en) | 2019-04-29 | 2022-07-05 | Microsoft Technology Licensing, Llc | Execution of an application within a scope of user-granted permission |
US11411959B2 (en) * | 2019-05-03 | 2022-08-09 | Microsoft Technology Licensing, Llc | Execution of application in a container within a scope of user-granted permission |
US11222137B2 (en) | 2019-05-03 | 2022-01-11 | Microsoft Technology Licensing, Llc | Storing and executing an application in a user's personal storage with user granted permission |
US11003771B2 (en) | 2019-05-03 | 2021-05-11 | Microsoft Technology Licensing, Llc | Self-help for DID claims |
US11876798B2 (en) * | 2019-05-20 | 2024-01-16 | Citrix Systems, Inc. | Virtual delivery appliance and system with remote authentication and related methods |
US11190514B2 (en) * | 2019-06-17 | 2021-11-30 | Microsoft Technology Licensing, Llc | Client-server security enhancement using information accessed from access tokens |
US11533312B2 (en) * | 2019-07-10 | 2022-12-20 | ColorTokens, Inc. | Dynamically enforcing context sensitive network access control policies |
US11470017B2 (en) * | 2019-07-30 | 2022-10-11 | At&T Intellectual Property I, L.P. | Immersive reality component management via a reduced competition core network component |
US11556367B2 (en) * | 2019-08-06 | 2023-01-17 | Microsoft Technology Licensing, Llc | Dynamic image composition for container deployment |
CN110955886B (en) * | 2019-11-08 | 2022-06-21 | 广州供电局有限公司 | Sandbox-based data security fusion service device and method |
CN111008041B (en) * | 2019-12-04 | 2022-03-11 | 北京百度网讯科技有限公司 | Command processing method and device for host, electronic equipment and storage medium |
US11314614B2 (en) | 2020-01-02 | 2022-04-26 | Sri International | Security for container networks |
US11601461B2 (en) * | 2020-01-13 | 2023-03-07 | Vmware, Inc. | Risk-based cloud profile management for VDI in the cloud |
US11856022B2 (en) | 2020-01-27 | 2023-12-26 | Netskope, Inc. | Metadata-based detection and prevention of phishing attacks |
US11233805B2 (en) | 2020-01-28 | 2022-01-25 | Cyberark Software Ltd. | Centralized security assessments of scripts in network environments |
US11232198B2 (en) * | 2020-01-28 | 2022-01-25 | Cyberark Software Ltd. | Dynamic visualization of scripts based on centralized security assessments |
US11394750B1 (en) | 2020-02-28 | 2022-07-19 | Red Hat, Inc. | System and method for generating network security policies in a distributed computation system utilizing containers |
US11539738B1 (en) * | 2020-03-24 | 2022-12-27 | Mcafee, Llc | Methods, systems, and media for mitigating damage resulting from a website being an intermediary in a cyberattack |
US20220060513A1 (en) * | 2020-08-21 | 2022-02-24 | Oracle Intenational Corporation | Centralized request processing and security zone policy enforcement in a cloud infrastructure system |
US11683331B2 (en) * | 2020-11-23 | 2023-06-20 | Juniper Networks, Inc. | Trust scoring of network entities in networks |
US11580230B2 (en) * | 2020-11-30 | 2023-02-14 | Aqua Security Software, Ltd. | System and method for assessing software containers for vulnerabilities |
US11811804B1 (en) | 2020-12-15 | 2023-11-07 | Red Hat, Inc. | System and method for detecting process anomalies in a distributed computation system utilizing containers |
US11848949B2 (en) | 2021-01-30 | 2023-12-19 | Netskope, Inc. | Dynamic distribution of unified policies in a cloud-based policy enforcement system |
US11989308B2 (en) * | 2021-05-27 | 2024-05-21 | EMC IP Holding Company LLC | Method to intelligently manage the end to end container compliance in cloud environments |
US11689505B2 (en) * | 2021-06-28 | 2023-06-27 | Cisco Technology, Inc. | Dynamic proxy response from application container |
US11651089B2 (en) * | 2021-07-13 | 2023-05-16 | Graphcore Ltd. | Terminating distributed trusted execution environment via self-isolation |
Family Cites Families (37)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7620956B2 (en) * | 2003-06-11 | 2009-11-17 | Symantec Corporation | Portable memory storage devices with application layers |
US8418234B2 (en) * | 2005-12-15 | 2013-04-09 | International Business Machines Corporation | Authentication of a principal in a federation |
US8972449B2 (en) * | 2005-12-29 | 2015-03-03 | Nextlabs, Inc. | Preventing conflicts of interests between two or more groups |
US7716240B2 (en) | 2005-12-29 | 2010-05-11 | Nextlabs, Inc. | Techniques and system to deploy policies intelligently |
US8244745B2 (en) * | 2005-12-29 | 2012-08-14 | Nextlabs, Inc. | Analyzing usage information of an information management system |
US8151337B2 (en) | 2006-06-30 | 2012-04-03 | Microsoft Corporation | Applying firewalls to virtualized environments |
US8612971B1 (en) * | 2006-10-17 | 2013-12-17 | Manageiq, Inc. | Automatic optimization for virtual systems |
US8769268B2 (en) | 2007-07-20 | 2014-07-01 | Check Point Software Technologies, Inc. | System and methods providing secure workspace sessions |
US9098698B2 (en) | 2008-09-12 | 2015-08-04 | George Mason Research Foundation, Inc. | Methods and apparatus for application isolation |
CN101730451B (en) * | 2008-10-24 | 2013-02-20 | 富准精密工业(深圳)有限公司 | Heat radiation device |
US8341749B2 (en) * | 2009-06-26 | 2012-12-25 | Vmware, Inc. | Preventing malware attacks in virtualized mobile devices |
US8627451B2 (en) | 2009-08-21 | 2014-01-07 | Red Hat, Inc. | Systems and methods for providing an isolated execution environment for accessing untrusted content |
US8479286B2 (en) * | 2009-12-15 | 2013-07-02 | Mcafee, Inc. | Systems and methods for behavioral sandboxing |
WO2011126911A1 (en) | 2010-03-30 | 2011-10-13 | Authentic8, Inc | Disposable browsers and authentication techniques for a secure online user environment |
US9116733B2 (en) * | 2010-05-28 | 2015-08-25 | Bromium, Inc. | Automated provisioning of secure virtual execution environment using virtual machine templates based on requested activity |
US9104837B1 (en) | 2012-06-18 | 2015-08-11 | Bromium, Inc. | Exposing subset of host file systems to restricted virtual machines based on upon performing user-initiated actions against host files |
US9609619B2 (en) * | 2010-08-31 | 2017-03-28 | William E. Woodcock, IV | Geolocation |
US9027151B2 (en) * | 2011-02-17 | 2015-05-05 | Red Hat, Inc. | Inhibiting denial-of-service attacks using group controls |
US8839245B1 (en) | 2012-06-18 | 2014-09-16 | Bromium, Inc. | Transferring files using a virtualized application |
RU2460133C1 (en) | 2011-06-28 | 2012-08-27 | Закрытое акционерное общество "Лаборатория Касперского" | System and method of protecting computer applications |
US9143530B2 (en) | 2011-10-11 | 2015-09-22 | Citrix Systems, Inc. | Secure container for protecting enterprise data on a mobile device |
US9245108B1 (en) | 2012-03-13 | 2016-01-26 | Bromium, Inc. | Dynamic adjustment of the file format to identify untrusted files |
US9032506B2 (en) | 2012-08-09 | 2015-05-12 | Cisco Technology, Inc. | Multiple application containerization in a single container |
US9087191B2 (en) | 2012-08-24 | 2015-07-21 | Vmware, Inc. | Method and system for facilitating isolated workspace for applications |
US9460283B2 (en) * | 2012-10-09 | 2016-10-04 | Dell Products L.P. | Adaptive integrity validation for portable information handling systems |
US9344762B2 (en) * | 2012-10-18 | 2016-05-17 | Broadcom Corporation | Integration of untrusted applications and frameworks with a secure operating system environment |
WO2014094653A1 (en) | 2012-12-20 | 2014-06-26 | 北京奇虎科技有限公司 | Device, method and system for detecting malicious links |
JP6070355B2 (en) * | 2013-03-28 | 2017-02-01 | 富士通株式会社 | Virtual machine control program, virtual machine control method, virtual machine control device, and cloud system |
US9716996B2 (en) | 2013-05-21 | 2017-07-25 | Brocade Communications Systems, Inc. | Method and system for selective and secure interaction of BYOD (bring your own device) with enterprise network through mobile wireless networks |
GB201318723D0 (en) | 2013-10-23 | 2013-12-04 | Avecto Ltd | Computer device and method for isolating untrusted content |
CN103914647A (en) * | 2014-04-14 | 2014-07-09 | 中国人民解放军国防科学技术大学 | Method for running programs in isolation manner on basis of local virtualization mechanism |
CO6950443A2 (en) | 2014-05-13 | 2014-05-20 | Sicpa Holding Sa | Pattern for encoding digital information on a surface, and marking and reading methods |
US20160342801A1 (en) * | 2014-06-25 | 2016-11-24 | defend7, Inc. | Containerized security as a service |
US9246690B1 (en) | 2014-09-03 | 2016-01-26 | Amazon Technologies, Inc. | Secure execution environment services |
US10516733B2 (en) * | 2014-11-25 | 2019-12-24 | Auth0, Inc. | Multi-tenancy via code encapsulated in server requests |
CN105138905A (en) * | 2015-08-25 | 2015-12-09 | 中国科学院信息工程研究所 | Isolation operation method for Linux application program |
US10635509B2 (en) * | 2016-11-17 | 2020-04-28 | Sung Jin Cho | System and method for creating and managing an interactive network of applications |
-
2016
- 2016-06-02 US US15/171,917 patent/US10855725B2/en active Active
-
2017
- 2017-05-25 CN CN201780033267.2A patent/CN109196505B/en active Active
- 2017-05-25 MX MX2018014912A patent/MX2018014912A/en unknown
- 2017-05-25 RU RU2018142303A patent/RU2755880C2/en active
- 2017-05-25 KR KR1020187034872A patent/KR102386560B1/en active IP Right Grant
- 2017-05-25 BR BR112018074347A patent/BR112018074347A8/en unknown
- 2017-05-25 SG SG11201810295UA patent/SG11201810295UA/en unknown
- 2017-05-25 EP EP17728376.9A patent/EP3465517B1/en active Active
- 2017-05-25 JP JP2018562972A patent/JP6982006B2/en active Active
- 2017-05-25 CA CA3023472A patent/CA3023472A1/en active Pending
- 2017-05-25 WO PCT/US2017/034354 patent/WO2017210065A1/en unknown
- 2017-05-25 ES ES17728376T patent/ES2806379T3/en active Active
- 2017-05-25 AU AU2017275464A patent/AU2017275464B2/en active Active
- 2017-05-25 NZ NZ747895A patent/NZ747895A/en unknown
-
2018
- 2018-11-05 ZA ZA2018/07411A patent/ZA201807411B/en unknown
- 2018-11-12 PH PH12018550196A patent/PH12018550196A1/en unknown
- 2018-11-20 CL CL2018003297A patent/CL2018003297A1/en unknown
- 2018-11-20 IL IL263152A patent/IL263152B/en unknown
- 2018-11-29 CO CONC2018/0012982A patent/CO2018012982A2/en unknown
Also Published As
Publication number | Publication date |
---|---|
JP6982006B2 (en) | 2021-12-17 |
BR112018074347A8 (en) | 2023-01-31 |
EP3465517B1 (en) | 2020-05-13 |
MX2018014912A (en) | 2019-05-06 |
CN109196505B (en) | 2022-04-19 |
RU2755880C2 (en) | 2021-09-22 |
CO2018012982A2 (en) | 2018-12-14 |
CL2018003297A1 (en) | 2019-03-01 |
KR102386560B1 (en) | 2022-04-13 |
CN109196505A (en) | 2019-01-11 |
US10855725B2 (en) | 2020-12-01 |
ES2806379T3 (en) | 2021-02-17 |
EP3465517A1 (en) | 2019-04-10 |
IL263152B (en) | 2021-12-01 |
BR112018074347A2 (en) | 2019-03-06 |
RU2018142303A3 (en) | 2020-07-24 |
US20170353496A1 (en) | 2017-12-07 |
CA3023472A1 (en) | 2017-12-07 |
ZA201807411B (en) | 2020-01-29 |
IL263152A (en) | 2018-12-31 |
KR20190015273A (en) | 2019-02-13 |
RU2018142303A (en) | 2020-06-01 |
PH12018550196A1 (en) | 2019-09-30 |
JP2019517694A (en) | 2019-06-24 |
AU2017275464A1 (en) | 2018-11-22 |
WO2017210065A1 (en) | 2017-12-07 |
AU2017275464B2 (en) | 2021-08-12 |
NZ747895A (en) | 2022-07-01 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
SG11201810295UA (en) | Hardware-based virtualized security isolation | |
SG11201905460SA (en) | Data unsealing with a sealing enclave | |
SG11201806723PA (en) | Security system | |
SG11201905461VA (en) | Data sealing with a sealing enclave | |
SG11201907320YA (en) | Trusted login method, server, and system | |
SG11201903604PA (en) | Iot security service | |
SG11201905456UA (en) | Addressing a trusted execution environment using encryption key | |
SG11201804696RA (en) | Techniques for metadata processing | |
SG11201809117QA (en) | Operating system for blockchain iot devices | |
SG11201710238QA (en) | Autonomic incident triage prioritization by performance modifier and temporal decay parameters | |
SG11201807964UA (en) | System and methods for decrypting network traffic in a virtualized environment | |
SG11201906575QA (en) | Continuous learning for intrusion detection | |
SG11201903787YA (en) | Exploiting input data sparsity in neural network compute units | |
SG11201909873TA (en) | Dynamic autonomous vehicle servicing and management | |
SG11201807307VA (en) | System and method for aerial system discrimination and action | |
SG11201809866PA (en) | Cryptographic applications for a blockchain system | |
SG11201901572PA (en) | System for distributed intelligent remote sensing systems | |
SG11201804190YA (en) | Method and system for blockchain variant using digital signatures | |
SG11201903098XA (en) | Multiparty reconciliation systems and methods | |
SG11201908293QA (en) | Selective application of reprojection processing on layer sub-regions for optimizing late stage reprojection power | |
SG11201810414RA (en) | Padlock device, systems including a padlock device, and methods of operating therefor | |
SG11201803073TA (en) | Insect singulator system | |
SG11201808758TA (en) | A method and system for controlling the performance of a contract using a distributed hash table and a peer-to-peer distributed ledger | |
SG11201903885RA (en) | Secure key management | |
SG11201804301UA (en) | Protection key management and prefixing in virtual address space legacy emulation system |