Adaptive position indicator
    31.
    发明授权

    公开(公告)号:US10251019B2

    公开(公告)日:2019-04-02

    申请号:US15962884

    申请日:2018-04-25

    Abstract: Methods, systems, computer-readable media, and apparatuses for determining a position indicator are presented. In some embodiments, position data indicating a position of a mobile device is obtained. A position indicator is determined based on at least one region of a map. The position of the mobile device is located within the at least one region. The position indicator indicates a map-feature-dependent region of the map. The position indicator is provided.

    Methods and systems for using causal analysis for boosted decision stumps to identify and respond to non-benign behaviors
    35.
    发明授权
    Methods and systems for using causal analysis for boosted decision stumps to identify and respond to non-benign behaviors 有权
    使用因果分析的方法和系统来提高决策树枝以识别和应对非良性行为

    公开(公告)号:US09578049B2

    公开(公告)日:2017-02-21

    申请号:US14706099

    申请日:2015-05-07

    CPC classification number: H04L63/1425 G06F21/566

    Abstract: A computing device processor may be configured with processor-executable instructions to implement methods of detecting and responding non-benign behaviors of the computing device. The processor may be configured to monitor device behaviors to collect behavior information, generate a behavior vector information structure based on the collected behavior information, apply the behavior vector information structure to a classifier model to generate analysis results, use the analysis results to classify a behavior of the device, use the analysis results to determine the features evaluated by the classifier model that contributed most to the classification of the behavior, and select the top “n” (e.g., 3) features that contributed most to the classification of the behavior. The computing device may display the selected features on an electronic display of the computing device.

    Abstract translation: 计算设备处理器可以配置有处理器可执行指令,以实现检测和响应计算设备的非良性行为的方法。 处理器可以被配置为监视设备行为以收集行为信息,基于收集的行为信息生成行为向量信息结构,将行为向量信息结构应用于分类器模型以生成分析结果,使用分析结果对行为进行分类 的设备,使用分析结果来确定由分类器模型评估的功能,对行为的分类最有贡献,并选择对行为分类最有贡献的顶部“n”(例如,3)特征。 计算设备可以在计算设备的电子显示器上显示所选择的特征。

    Methods and Systems for Using an Expectation-Maximization (EM) Machine Learning Framework for Behavior-Based Analysis of Device Behaviors
    36.
    发明申请
    Methods and Systems for Using an Expectation-Maximization (EM) Machine Learning Framework for Behavior-Based Analysis of Device Behaviors 审中-公开
    使用期望最大化(EM)机器学习框架的基于行为的设备行为分析的方法和系统

    公开(公告)号:US20170024660A1

    公开(公告)日:2017-01-26

    申请号:US14806882

    申请日:2015-07-23

    Abstract: A computing device processor may be configured with processor-executable instructions to implement methods that include using expectation-maximization (EM) machine learning techniques to continuously, repeatedly, or recursively generate, train, improve, focus, or refine the machine learning classifier models that are used by a behavior-based monitoring and analysis system (or behavior-based security system) of the computing device to better identify and respond to various conditions or behaviors that may have a negative impact on its performance, power utilization levels, network usage levels, security and/or privacy over time.

    Abstract translation: 计算设备处理器可以配置有处理器可执行指令,以实现包括使用期望最大化(EM)机器学习技术来持续,重复地或递归地生成,训练,改进,聚焦或改进机器学习分类器模型的机器学习分类器模型的方法, 被基于行为的监视和分析系统(或基于行为的安全系统)用于计算设备,以更好地识别和响应可能对其性能,功率利用水平,网络使用水平产生负面影响的各种条件或行为 ,安全和/或隐私。

    Data flow tracking via memory monitoring
    37.
    发明授权
    Data flow tracking via memory monitoring 有权
    通过内存监控进行数据流跟踪

    公开(公告)号:US09519533B2

    公开(公告)日:2016-12-13

    申请号:US14607251

    申请日:2015-01-28

    Abstract: Methods and devices for tracking data flows in a computing device include monitoring memory in a hardware component of the computing device to identify a read operation that reads information from a tainted memory address, using heuristics to identify a first, second, and third number of operations performed after the identified read operation, marking memory addresses of write operations performed after first number of operations and before the second number of operations as tainted, and marking memory addresses of write operations performed after the third number of operations and before the second number of operations as untainted.

    Abstract translation: 用于在计算设备中跟踪数据流的方法和设备包括监视计算设备的硬件组件中的存储器,以识别从污染的存储器地址读取信息的读取操作,使用启发式来识别第一,第二和第三数量的操作 在所识别的读取操作之后执行,标记在第一次操作之后和在第二次操作之前执行的写入操作的存储器地址,并且标记在第三次操作之后和在第二个操作次数之前执行的写入操作的存储器地址 没有了。

    Methods and Systems for Detecting Fake User Interactions with a Mobile Device for Improved Malware Protection
    38.
    发明申请
    Methods and Systems for Detecting Fake User Interactions with a Mobile Device for Improved Malware Protection 有权
    用于检测与用于改进恶意软件保护的移动设备的虚假用户交互的方法和系统

    公开(公告)号:US20160232352A1

    公开(公告)日:2016-08-11

    申请号:US14616046

    申请日:2015-02-06

    CPC classification number: G06F21/566 G06F21/316 G06F2221/2133

    Abstract: A computing device processor may be configured with processor-executable instructions to implement methods of detecting and responding to fake user interaction (UI) events. The processor may determine whether a user interaction event is a fake user interaction event by analyzing raw data generated by one or more hardware drivers in conjunction with user interaction event information generated or received by the high-level operating system. In addition, the processor may be configured with processor-executable instructions to implement methods of using behavioral analysis and machine learning techniques to identify, prevent, correct, or otherwise respond to malicious or performance-degrading behaviors of the computing device based on whether a detected user interaction event is an authentic or fake user interaction event.

    Abstract translation: 计算设备处理器可以配置有处理器可执行指令,以实现检测和响应假的用户交互(UI)事件的方法。 处理器可以通过结合由高级操作系统生成或接收的用户交互事件信息来分析由一个或多个硬件驱动器生成的原始数据来确定用户交互事件是否是假的用户交互事件。 此外,处理器可以被配置有处理器可执行指令,以实现使用行为分析和机器学习技术的方法,以基于检测到的方式来识别,防止,纠正或以其他方式响应计算设备的恶意或性能降级的行为 用户交互事件是真实的或假的用户交互事件。

    Data Flow Tracking Via Memory Monitoring
    39.
    发明申请
    Data Flow Tracking Via Memory Monitoring 有权
    通过内存监控进行数据流跟踪

    公开(公告)号:US20160217029A1

    公开(公告)日:2016-07-28

    申请号:US14607251

    申请日:2015-01-28

    Abstract: Methods and devices for tracking data flows in a computing device include monitoring memory in a hardware component of the computing device to identify a read operation that reads information from a tainted memory address, using heuristics to identify a first, second, and third number of operations performed after the identified read operation, marking memory addresses of write operations performed after first number of operations and before the second number of operations as tainted, and marking memory addresses of write operations performed after the third number of operations and before the second number of operations as untainted.

    Abstract translation: 用于在计算设备中跟踪数据流的方法和设备包括监视计算设备的硬件组件中的存储器,以识别从污染的存储器地址读取信息的读取操作,使用启发式来识别第一,第二和第三数量的操作 在所识别的读取操作之后执行,标记在第一次操作之后和在第二次操作之前执行的写入操作的存储器地址,并且标记在第三次操作之后和在第二个操作次数之前执行的写入操作的存储器地址 没有了。

    ACCESS POINT SELECTION FOR MOBILE DEVICE POSITIONING
    40.
    发明申请
    ACCESS POINT SELECTION FOR MOBILE DEVICE POSITIONING 审中-公开
    移动设备定位的接入点选择

    公开(公告)号:US20160174147A1

    公开(公告)日:2016-06-16

    申请号:US14569437

    申请日:2014-12-12

    CPC classification number: G01S5/0252 G01S5/0268 H04W4/02 H04W64/00

    Abstract: Methods, systems, computer-readable media, and apparatuses for reducing a set of access points to be used for mobile device positioning are presented. In some embodiments, a subset of access points may be selected from a set of access points. A trial set of access points may be generated by removing the subset of access points from the set of access points. A coverage quality may be determined for the trial set of access points. In response to determining that the coverage quality of the trial set of access points exceeds a threshold coverage quality, the subset of access points may be removed from the set of access points.

    Abstract translation: 提出了用于减少要用于移动设备定位的一组接入点的方法,系统,计算机可读介质和设备。 在一些实施例中,可以从一组接入点中选择接入点的子集。 可以通过从接入点集合去除接入点的子集来生成一组接入点。 可以针对接入点的试用集确定覆盖质量。 响应于确定接入点的试验集合的覆盖质量超过阈值覆盖质量,可以从该组接入点中移除接入点的子集。

Patent Agency Ranking