知搜-全球专利检索

  1. 登录
  2. 注册

搜索结果

24 条记录 (耗时 0.014 秒)

    Computer security vulnerability assessment
    1.
    发明授权
    Computer security vulnerability assessment 有权

    公开(公告)号：US11165811B2

    公开(公告)日：2021-11-02

    申请号：US16780674

    申请日：2020-02-03

    申请人： OPSWAT, Inc.

    发明人： Benjamin Czarny ,  Jianpeng Mo ,  Ali Rezafard ,  David Matthew Patt

    IPC分类号： H04L29/06 ,  G06F21/57 ,  G06F16/21

    摘要： Computer security vulnerability assessment is performed with product binary data and product vulnerability data that correspond with product identification data. A correspondence between the product binary data and the product vulnerability data is determined, and a binaries-to-vulnerabilities database is generated. The binaries-to-vulnerabilities database is used to scan binary data from a target device to find matches with the product binary data. A known security vulnerability of the target device is determined based on the scanning and the correspondence between the product binary data and the vulnerability data. In some embodiments, the target device is powered off and used as an external storage device to receive the binary data therefrom.

    File format validation
    2.
    发明授权
    File format validation 有权

    公开(公告)号：US10242189B1

    公开(公告)日：2019-03-26

    申请号：US16148003

    申请日：2018-10-01

    申请人： OPSWAT, Inc.

    发明人： Benjamin Czarny ,  Yiyi Miao ,  Jianpeng Mo

    IPC分类号： G06F21/56 ,  G06F16/11 ,  G06F21/62 ,  H04L29/06 ,  G06F17/30

    摘要： A method for securely validating the file format type including receiving a file having a file format type, a header and a content block. The header has a header block with a description representing attributes of the actual content in the file. The content block has leading bytes representing attributes of the actual content, and actual content. Data is parsed from the description of the header block, the leading bytes and the actual content. Data from the description is compared to the data from the leading bytes, data from the leading bytes is compared to the data from the actual content, and data from the description is compared to the data from the actual content. The file format type is validated and trustable when the data from the description, the data from the leading bytes and the data from the actual content are consistent with one another.

    Computer security vulnerability assessment
    3.
    发明授权
    Computer security vulnerability assessment 有权

    公开(公告)号：US09749349B1

    公开(公告)日：2017-08-29

    申请号：US15275123

    申请日：2016-09-23

    申请人： OPSWAT, Inc.

    发明人： Benjamin Czarny ,  Jianpeng Mo ,  Ali Rezafard ,  David Matthew Patt

    IPC分类号： H04L29/06 ,  G06F17/30 ,  G06F21/57

    CPC分类号： H04L63/1433 ,  G06F17/30289 ,  G06F21/577 ,  H04L63/1425

    摘要： Computer security vulnerability assessment is performed with product binary data and product vulnerability data that correspond with product identification data. A correspondence between the product binary data and the product vulnerability data is determined, and a binaries-to-vulnerabilities database is generated. The binaries-to-vulnerabilities database is used to scan binary data from a target device to find matches with the product binary data. A known security vulnerability of the target device is determined based on the scanning and the correspondence between the product binary data and the vulnerability data. In some embodiments, the target device is powered off and used as an external storage device to receive the binary data therefrom.

    Computer security vulnerability assessment
    4.
    发明授权
    Computer security vulnerability assessment 有权

    公开(公告)号：US10554681B2

    公开(公告)日：2020-02-04

    申请号：US16174139

    申请日：2018-10-29

    申请人： OPSWAT, Inc.

    发明人： Benjamin Czarny ,  Jianpeng Mo ,  Ali Rezafard ,  David Matthew Patt

    IPC分类号： H04L29/06 ,  G06F21/57 ,  G06F16/21

    摘要： Computer security vulnerability assessment is performed with product binary data and product vulnerability data that correspond with product identification data. A correspondence between the product binary data and the product vulnerability data is determined, and a binaries-to-vulnerabilities database is generated. The binaries-to-vulnerabilities database is used to scan binary data from a target device to find matches with the product binary data. A known security vulnerability of the target device is determined based on the scanning and the correspondence between the product binary data and the vulnerability data. In some embodiments, the target device is powered off and used as an external storage device to receive the binary data therefrom.

    Computer security vulnerability assessment
    8.
    发明授权
    Computer security vulnerability assessment 有权

    公开(公告)号：US11522901B2

    公开(公告)日：2022-12-06

    申请号：US17000801

    申请日：2020-08-24

    申请人： OPSWAT, Inc.

    发明人： Frank Dye ,  Benjamin Czarny ,  Bill Zhao ,  Shae Anthony Bettencourt ,  Yiyi Miao

    IPC分类号： H04L9/40 ,  G06F21/57 ,  G06F16/21

    摘要： A system receives binary data and first identification data. The binary data includes hashes of strings of bits, bytes, words or characters. The system receives vulnerability data and second identification data. The system determines a correspondence between the binary data and the vulnerability data based on matching the first identification data with the second identification data. The vulnerability data includes a country of origin for a product identified by the second identification data. The system generates a binaries-to-vulnerabilities database. The system scans target binary data from a target device to to find matches between the target binary data and the binary data using the binaries-to-vulnerabilities database. The system determines a known security vulnerability based on the results of the scanning and the correspondence between the binary data and the vulnerability data. The known security vulnerability includes the country of origin for the product in the target device.

    COMPUTER SECURITY VULNERABILITY ASSESSMENT
    9.
    发明申请
    COMPUTER SECURITY VULNERABILITY ASSESSMENT 审中-公开

    公开(公告)号：US20190075129A1

    公开(公告)日：2019-03-07

    申请号：US16174139

    申请日：2018-10-29

    申请人： OPSWAT, Inc.

    发明人： Benjamin Czarny ,  Jianpeng Mo ,  Ali Rezafard ,  David Matthew Patt

    IPC分类号： H04L29/06 ,  G06F17/30 ,  G06F21/57

    CPC分类号： H04L63/1433 ,  G06F16/21 ,  G06F21/577 ,  H04L63/1425 ,  H05K999/99

    摘要： Computer security vulnerability assessment is performed with product binary data and product vulnerability data that correspond with product identification data. A correspondence between the product binary data and the product vulnerability data is determined, and a binaries-to-vulnerabilities database is generated. The binaries-to-vulnerabilities database is used to scan binary data from a target device to find matches with the product binary data. A known security vulnerability of the target device is determined based on the scanning and the correspondence between the product binary data and the vulnerability data. In some embodiments, the target device is powered off and used as an external storage device to receive the binary data therefrom.

    Network Access Control with Compliance Policy Check
    10.
    发明申请
    Network Access Control with Compliance Policy Check 审中-公开

    公开(公告)号：US20180352003A1

    公开(公告)日：2018-12-06

    申请号：US16059467

    申请日：2018-08-09

    申请人： OPSWAT, Inc.

    发明人： Adam Gregory Winn ,  Benjamin Czarny ,  Jianpeng Mo ,  Yiyi Miao

    IPC分类号： H04L29/06

    CPC分类号： H04L63/20 ,  H04L63/0428 ,  H04L63/0823 ,  H04L63/10 ,  H04L63/1416

    摘要： Embodiments of the present invention include methods involving an authentication application, a client application, or a combination of a network access control server with the authentication application and the client application. The client application collects compliance data regarding the user device and communicates the compliance data to the network access control server. The network access control server generates a compliance check result based on whether the compliance data indicates that the user device is compliant with a security policy for the software-as-a-service server. The authentication application grants access by the user device when the compliance check result is positive; and the authentication application denies access by the user device when the compliance check result is negative. In some embodiments, the compliance check result or a user device identifier is stored in a web browser cookie or a client certificate on the user device.