Methods and Systems of Generating Application-Specific Models for the Targeted Protection of Vital Applications
    11.
    发明申请
    Methods and Systems of Generating Application-Specific Models for the Targeted Protection of Vital Applications 有权
    生成应用程序特定模型的方法和系统用于有针对性的保护重要应用程序

    公开(公告)号:US20150161024A1

    公开(公告)日:2015-06-11

    申请号:US14451597

    申请日:2014-08-05

    Abstract: Methods, and computing devices implementing the methods, improve the efficiency and performance of a comprehensive behavioral monitoring and analysis system that is configured to predict whether a software application is causing undesirable or performance depredating behavior. The behavioral monitoring and analysis system may be configured to quickly and efficiently classify certain software applications as being benign by generating a behavior vector that characterizes the activities of the software application, determining whether the generated behavior vector includes a distinguishing behavior or behavioral clue identifying the software application as a trusted software application, and classifying the software application as benign in response to determining that the generated behavior vector includes a distinguishing behavior identifying the software application as a trusted software application.

    Abstract translation: 实施这些方法的方法和计算设备,提高了综合行为监测和分析系统的效率和性能,该系统配置为预测软件应用程序是否导致不良或性能下降的行为。 行为监视和分析系统可以被配置为通过生成表征软件应用的活动的行为向量来快速有效地将某些软件应用程序分类为良性,确定生成的行为向量是否包含识别软件的区别行为或行为线索 应用程序作为可信软件应用程序,并且将软件应用程序分类为响应于确定所生成的行为向量包括将软件应用标识为可信软件应用程序的区别行为。

    PORTAL TRANSITION PARAMETERS FOR USE IN MOBILE DEVICE POSITIONING
    12.
    发明申请
    PORTAL TRANSITION PARAMETERS FOR USE IN MOBILE DEVICE POSITIONING 审中-公开
    用于移动设备定位的门式转换参数

    公开(公告)号:US20140128093A1

    公开(公告)日:2014-05-08

    申请号:US13670357

    申请日:2012-11-06

    CPC classification number: H04W64/006

    Abstract: Various methods, apparatuses and/or articles of manufacture are provided for use in one or more electronic devices to perform and/or otherwise support certain positioning capabilities with regard to a mobile device. For example, certain positioning capabilities may make use of one or more portal transition parameters that may be based, at least in part, on a determined likelihood that a mobile device, if located in a first region of a specific environment and within a threshold area of a portal connecting the first region to a second region of the specific environment, may or may not make use of the portal to transition from the first region to the second region, e.g., through the portal.

    Abstract translation: 提供了各种方法,装置和/或制品,用于一个或多个电子设备中以执行和/或以其他方式支持关于移动设备的某些定位能力。 例如,某些定位能力可以使用一个或多个门户转换参数,其至少部分地基于确定的可能性,即移动设备如果位于特定环境的第一区域中并且在阈值区域内 连接第一区域到特定环境的第二区域的门户可以或可以不利用门户从第一区域转移到第二区域,例如通过门户。

    BEHAVIORAL ANALYSIS TO AUTOMATE DIRECT AND INDIRECT LOCAL MONITORING OF INTERNET OF THINGS DEVICE HEALTH
    14.
    发明申请
    BEHAVIORAL ANALYSIS TO AUTOMATE DIRECT AND INDIRECT LOCAL MONITORING OF INTERNET OF THINGS DEVICE HEALTH 有权
    自动进行直接和间接监控互联网设备健康的行为分析

    公开(公告)号:US20160261465A1

    公开(公告)日:2016-09-08

    申请号:US14638602

    申请日:2015-03-04

    Abstract: The disclosure generally relates to behavioral analysis to automate monitoring Internet of Things (IoT) device health in a direct and/or indirect manner. In particular, normal behavior associated with an IoT device in a local IoT network may be modeled such that behaviors observed at the IoT device may be compared to the modeled normal behavior to determine whether the behaviors observed at the IoT device are normal or anomalous. Accordingly, in a distributed IoT environment, more powerful “analyzer” devices can collect behaviors locally observed at other (e.g., simpler) “observer” devices and conduct behavioral analysis across the distributed IoT environment to detect anomalies potentially indicating malicious attacks, malfunctions, or other issues that require customer service and/or further attention. Furthermore, devices with sufficient capabilities may conduct (local) on-device behavioral analysis to detect anomalous conditions without sending locally observed behaviors to another aggregator device and/or analyzer device.

    Abstract translation: 本公开通常涉及以直接和/或间接方式自动监视物联网(IoT)设备健康状况的行为分析。 特别地,可以建模与本地IoT网络中的IoT设备相关联的正常行为,使得可以将在IoT设备处观察到的行为与建模的正常行为进行比较,以确定在IoT设备处观察到的行为是正常还是异常。 因此,在分布式IoT环境中,更强大的“分析器”设备可以收集在其他(例如更简单的)“观察者”设备本地观察到的行为,并在分布式IoT环境中进行行为分析,以检测潜在地指示恶意攻击,故障或 其他需要客户服务和/或进一步关注的问题。 此外,具有足够能力的设备可以进行(本地)设备上行为分析以检测异常情况,而不将本地观察到的行为发送到另一聚合器设备和/或分析仪设备。

    AUTOMATING CUSTOMER SERVICE AN INTERNET OF EVERYTHING ENVIRONMENT
    15.
    发明申请
    AUTOMATING CUSTOMER SERVICE AN INTERNET OF EVERYTHING ENVIRONMENT 审中-公开
    自动化客户服务一个互联网的环境

    公开(公告)号:US20160247164A1

    公开(公告)日:2016-08-25

    申请号:US14627389

    申请日:2015-02-20

    CPC classification number: G06Q30/016 G06Q10/10 G06Q50/06 H04L43/065 H04L67/12

    Abstract: Systems and methods are disclosed for automating customer service for a monitored device (MD). A method for an Internet of Everything management device to automate customer service for a monitored device comprises collecting sensor data from a plurality of sensors, wherein the plurality of sensors comprises a first sensor that is not included in the MD, determining whether the MD is exhibiting abnormal behavior based on an analysis of the collected sensor data, and transmitting a report to a customer service entity associated with the MD in response to a determination that the MD is exhibiting abnormal behavior.

    Abstract translation: 公开了用于自动化被监视设备(MD)的客户服务的系统和方法。 一种用于所有管理设备的因特网自动化用于被监视设备的客户服务的方法包括从多个传感器收集传感器数据,其中所述多个传感器包括不包括在MD中的第一传感器,确定MD是否正在展示 基于对收集的传感器数据的分析的异常行为,以及响应于确定MD呈现异常行为而将报告发送到与MD相关联的客户服务实体。

    LOCATION BASED PROCESS-MONITORING
    16.
    发明申请
    LOCATION BASED PROCESS-MONITORING 审中-公开
    基于位置的过程监控

    公开(公告)号:US20160217281A1

    公开(公告)日:2016-07-28

    申请号:US15088556

    申请日:2016-04-01

    Abstract: Disclosed are systems, apparatus, devices, methods, computer program products, and other implementations, including a method that includes determining location of a device, and controlling monitoring of behavior of one or more processes executing on the device based on the determined location of the device to identify potential one or more security-risky processes from the monitored one or more executing processes. In some embodiments, controlling the monitoring of the behavior of the one or more processes may include one or more of, for example, adjusting frequency of the monitoring of the one or more processes based on the determined location of the device, adjusting level of detail obtained for the monitored behavior of the one or more processes based on the determined location of the device, and/or adjusting features being observed for the monitored one or more processes based on the determined location of the device.

    Abstract translation: 公开了系统,装置,设备,方法,计算机程序产品和其他实施方式,包括包括确定设备的位置的方法,以及基于所确定的位置来控制在设备上执行的一个或多个进程的行为的监视 从所监视的一个或多个执行过程中识别潜在的一个或多个安全风险过程。 在一些实施例中,控制对一个或多个进程的行为的监视可以包括例如基于所确定的设备位置来调整一个或多个进程的监视的频率中的一个或多个,调整详细程度 基于所确定的设备的位置来监视所述一个或多个进程的监视行为,和/或基于所确定的设备的位置来调整针对所监视的一个或多个进程的特征。

    APIs for Obtaining Device-Specific Behavior Classifier Models from the Cloud
    17.
    发明申请
    APIs for Obtaining Device-Specific Behavior Classifier Models from the Cloud 有权
    用于从云获取设备特定行为分类器模型的API

    公开(公告)号:US20140237595A1

    公开(公告)日:2014-08-21

    申请号:US14157606

    申请日:2014-01-17

    Abstract: The various aspects provide a system and methods implemented on the system for generating a behavior model on a server that includes features specific to a mobile computing device and the device's current state/configuration. In the various aspects, the mobile computing device may send information identifying itself, its features, and its current state to the server. In response, the server may generate a device-specific lean classifier model for the mobile computing device based on the device's information and state and may send the device-specific lean classifier model to the device for use in detecting malicious behavior. The various aspects may enhance overall security and performance on the mobile computing device by leveraging the superior computing power and resources of the server to generate a device-specific lean classifier model that enables the device to monitor features that are actually present on the device for malicious behavior.

    Abstract translation: 各个方面提供在系统上实现的系统和方法,用于在服务器上生成包括移动计算设备特有的功能和设备的当前状态/配置的行为模型。 在各个方面,移动计算设备可以向服务器发送标识自身,其特征及其当前状态的信息。 作为响应,服务器可以基于设备的信息和状态为移动计算设备生成针对设备的精简分类器模型,并且可以将设备特定的精简分类器模型发送到用于检测恶意行为的设备。 各个方面可以通过利用服务器的优越的计算能力和资源来增强移动计算设备的总体安全性和性能,以生成特定于设备的精益分类器模型,使得设备能够监视实际存在于设备上的恶意的特征 行为。

    MEASUREMENTS FOR INDOOR NAVIGATION
    18.
    发明申请
    MEASUREMENTS FOR INDOOR NAVIGATION 有权
    室内导航测量

    公开(公告)号:US20140228046A1

    公开(公告)日:2014-08-14

    申请号:US13767752

    申请日:2013-02-14

    Abstract: A method of obtaining and using access point signal information includes: receiving signals at a mobile device from a first set of access points during a passive measurement; and performing a first active measurement at the mobile device for the first set of the access points, including: sending at least one first communication each sent toward a respective one of the access points of the first set; and receiving at least one second communication each corresponding to, and responsive to, one of the at least one first communication and received from a corresponding one of the access points of the first set; where the passive measurement and the first active measurement is each performed repeatedly with the first set of the access points being reestablished at each repeat performance of the passive measurement, and with the passive measurement being performed less often than the first active measurement.

    Abstract translation: 一种获取和使用接入点信号信息的方法包括:在被动测量期间从移动设备接收来自第一组接入点的信号; 以及针对所述第一组接入点在所述移动设备处执行第一主动测量,包括:发送至少一个第一通信,每个至少一个第一通信被发送到所述第一组的接入点中的相应一个接入点; 以及接收至少一个第二通信,每个对应于并且响应于所述至少一个第一通信中的一个并且从所述第一组的所述接入点中的相应一个接收点接收; 其中被动测量和第一主动测量被重复执行,在被动测量的每个重复执行时,第一组接入点被重新建立,并且被动测量的执行频率低于第一有源测量值。

Patent Agency Ranking