Methods and systems for behavior-specific actuation for real-time whitelisting

    公开(公告)号:US10104107B2

    公开(公告)日:2018-10-16

    申请号:US14849849

    申请日:2015-09-10

    Abstract: Various embodiments include methods of evaluating device behaviors in a computing device and enabling white listing of particular behaviors. Various embodiments may include monitoring activities of a software application operating on the computing device, and generating a behavior vector information structure that characterizes a first monitored activity of the software application. The behavior vector information structure may be applied to a machine learning classifier model to generate analysis results. The analysis results may be used to classify the first monitored activity of the software application as one of benign, suspicious, and non-benign. A prompt may be displayed to the user that requests that the user select whether to whitelist the software application in response to classifying the first monitored activity of the software application as suspicious or non-benign. The first monitored activity may be added to a whitelist of device behaviors in response to receiving a user input.

    Using normalized confidence values for classifying mobile device behaviors

    公开(公告)号:US10089582B2

    公开(公告)日:2018-10-02

    申请号:US14826430

    申请日:2015-08-14

    Abstract: Methods and systems for classifying mobile device behavior include generating a full classifier model that includes a finite state machine suitable for conversion into boosted decision stumps and/or which describes all or many of the features relevant to determining whether a mobile device behavior is benign or contributing to the mobile device's degradation over time. A mobile device may receive the full classifier model along with sigmoid parameters and use the model to generate a full set of boosted decision stumps from which a more focused or lean classifier model is generated by culling the full set to a subset suitable for efficiently determining whether mobile device behavior are benign. Results of applying the focused or lean classifier model may be normalized using a sigmoid function, with the resulting normalized result used to determine whether the behavior is benign or non-benign.

    Managing Network Traffic
    14.
    发明申请

    公开(公告)号:US20180131624A1

    公开(公告)日:2018-05-10

    申请号:US15429007

    申请日:2017-02-09

    Abstract: Embodiments provide methods of managing network traffic flows. A processor of a network device may receive a first network traffic flow of a monitoring computing device and information identifying a source application of the first network traffic flow. The processor may determine a characteristic of the first network traffic flow associated with the application based at least in part on information in the first network traffic flow and the identified source application. The processor may receive a second network traffic flow from a non-monitoring computing device, and may associate the source application and the second network traffic flow if one or more characteristics of the second network traffic flow match or correlating to one or more characteristics of network traffic resulting from the source application.

    Methods and apparatus for position estimation
    16.
    发明授权
    Methods and apparatus for position estimation 有权
    位置估算方法和装置

    公开(公告)号:US09584980B2

    公开(公告)日:2017-02-28

    申请号:US14288195

    申请日:2014-05-27

    CPC classification number: H04W4/04 G01C21/206 G01S5/16 G06T7/74

    Abstract: Systems, apparatus and methods disclosed herein facilitate vision based mobile device location determination. In some embodiments, a method for estimating a position of a mobile device may comprise: detecting that the mobile device is in communication with at least one of a plurality of devices, where each of the plurality of devices associated with a corresponding device identifier. The capture of at least one image by an image sensor coupled to the mobile device may be triggered, based, in part on: the device identifier corresponding to the device in communication with the mobile device, and/or a field of view of the image sensor. A location of the mobile device may then be determined, based, in part, on the at least one captured image.

    Abstract translation: 本文公开的系统,装置和方法有助于基于视觉的移动设备位置确定。 在一些实施例中,用于估计移动设备的位置的方法可以包括:检测移动设备与多个设备中的至少一个通信,其中多个设备中的每一个与相应的设备标识符相关联。 部分地基于与移动设备通信的设备相对应的设备标识符和/或图像的视场来触发由耦合到移动设备的图像传感器捕捉至少一个图像 传感器。 然后可以部分地基于至少一个捕获的图像来确定移动设备的位置。

    Methods and Systems for Using Causal Analysis for Boosted Decision Stumps to Identify and Respond to Non-Benign Behaviors
    17.
    发明申请
    Methods and Systems for Using Causal Analysis for Boosted Decision Stumps to Identify and Respond to Non-Benign Behaviors 有权
    使用推理决策树的因果分析来识别和应对非良性行为的方法和系统

    公开(公告)号:US20160330223A1

    公开(公告)日:2016-11-10

    申请号:US14706099

    申请日:2015-05-07

    CPC classification number: H04L63/1425 G06F21/566

    Abstract: A computing device processor may be configured with processor-executable instructions to implement methods of detecting and responding non-benign behaviors of the computing device. The processor may be configured to monitor device behaviors to collect behavior information, generate a behavior vector information structure based on the collected behavior information, apply the behavior vector information structure to a classifier model to generate analysis results, use the analysis results to classify a behavior of the device, use the analysis results to determine the features evaluated by the classifier model that contributed most to the classification of the behavior, and select the top “n” (e.g., 3) features that contributed most to the classification of the behavior. The computing device may display the selected features on an electronic display of the computing device.

    Abstract translation: 计算设备处理器可以配置有处理器可执行指令,以实现检测和响应计算设备的非良性行为的方法。 处理器可以被配置为监视设备行为以收集行为信息,基于收集的行为信息生成行为向量信息结构,将行为向量信息结构应用于分类器模型以生成分析结果,使用分析结果对行为进行分类 的设备,使用分析结果来确定由分类器模型评估的功能,对行为的分类最有贡献,并选择对行为分类最有贡献的顶部“n”(例如,3)特征。 计算设备可以在计算设备的电子显示器上显示所选择的特征。

    ADAPTIVE POSITION INDICATOR
    18.
    发明申请
    ADAPTIVE POSITION INDICATOR 有权
    自适应位置指示器

    公开(公告)号:US20160234635A1

    公开(公告)日:2016-08-11

    申请号:US14618977

    申请日:2015-02-10

    CPC classification number: H04W4/02 G01S1/06 H04W4/043 H04W4/33

    Abstract: Methods, systems, computer-readable media, and apparatuses for determining a position indicator are presented. In some embodiments, position data indicating a position of a mobile device is obtained. A position indicator is determined based on at least one region of a map. The position of the mobile device is located within the at least one region. The position indicator indicates a map-feature-dependent region of the map. The position indicator is provided.

    Abstract translation: 提出了用于确定位置指示符的方法,系统,计算机可读介质和装置。 在一些实施例中,获得指示移动设备的位置的位置数据。 基于地图的至少一个区域确定位置指示符。 移动设备的位置位于至少一个区域内。 位置指示符指示地图的与地图要素相关的区域。 提供位置指示器。

    Using Normalized Confidence Values For Classifying Mobile Device Behaviors
    19.
    发明申请
    Using Normalized Confidence Values For Classifying Mobile Device Behaviors 审中-公开
    使用归一化置信度值分类移动设备行为

    公开(公告)号:US20150356462A1

    公开(公告)日:2015-12-10

    申请号:US14826430

    申请日:2015-08-14

    CPC classification number: G06N99/005 G06N5/025 G06N5/043

    Abstract: Methods and systems for classifying mobile device behavior include generating a full classifier model that includes a finite state machine suitable for conversion into boosted decision stumps and/or which describes all or many of the features relevant to determining whether a mobile device behavior is benign or contributing to the mobile device's degradation over time. A mobile device may receive the full classifier model along with sigmoid parameters and use the model to generate a full set of boosted decision stumps from which a more focused or lean classifier model is generated by culling the full set to a subset suitable for efficiently determining whether mobile device behavior are benign. Results of applying the focused or lean classifier model may be normalized using a sigmoid function, with the resulting normalized result used to determine whether the behavior is benign or non-benign.

    Abstract translation: 用于分类移动设备行为的方法和系统包括生成包括适合于转换为增强的决策树桩的有限状态机的完整分类器模型和/或描述与确定移动设备行为是良性还是贡献相关的所有或许多特征 随着时间的推移,移动设备的恶化。 移动设备可以连同S型参数一起接收完整的分类器模型,并使用该模型来生成一整套增强的决策树桩,通过将完整集合剔除,从而从整个集合或精益分类器模型生成更多聚焦或精益分类器模型,适用于有效地确定是否 移动设备行为是良性的。 应用聚焦或精确分类器模型的结果可以使用S形函数进行归一化,所得到的归一化结果用于确定行为是良性还是非良性。

    CROWD SOURCING STRATEGY TO MINIMIZE SYSTEM BIAS
    20.
    发明申请
    CROWD SOURCING STRATEGY TO MINIMIZE SYSTEM BIAS 审中-公开
    CROWD采购策略以最小化系统偏差

    公开(公告)号:US20150237509A1

    公开(公告)日:2015-08-20

    申请号:US14181395

    申请日:2014-02-14

    Abstract: Systems, apparatus and methods for deriving a heatmap in a server are presented. A heatmap is formed from sensor measurements and/or wireless signal strength measurements that have been grouped. Sensor measurements are paired or group into complementary sets thereby reducing sensor bias and/or system bias that is otherwise included because of sensor drift and unbalanced directional travel. Similarly, wireless signal strength measurements are paired or group into complementary sets also reducing system bias.

    Abstract translation: 提出了一种用于在服务器中导出热图的系统,装置和方法。 热分布图由已分组的传感器测量和/或无线信号强度测量形成。 传感器测量配对或分组为互补组,从而降低传感器偏差和/或系统偏差,否则由于传感器漂移和不平衡定向行驶而导致的偏差。 类似地,无线信号强度测量被配对或分组成互补集,还降低系统偏差。

Patent Agency Ranking