Patent classifications
G06F2221/032
Protecting computer systems against malicious software stored on removeable data storage devices
In an example method, one or more processors determine that a first data storage device has been communicatively coupled to a first computer system, determine that the first computer system is associated with a first geographical location, determine that the first data storage device is associated with a first user, determine that the first user is associated with one or more additional data storage devices, and determine usage data regarding the one or more additional data storage devices. Further, the one or more processors control a transmission of data between the first data storage device and first computer system based on the first geographical location and the usage data.
Building and deploying an application
The present disclosure relates to a method for deploying an application in an execution environment using a first and second sets of key pairs. The method comprises: creating a sequence of tasks comprising build tasks followed by a deploy task. The tasks are configured to receive a task input for performing the tasks. The task input comprises a contribution input and an output of a task preceding at least one of the build tasks. The contribution input comprises secrets. The output of the build tasks is encrypted with a respective encryption key of the first set of key pairs, wherein the contribution input of a task subsequent to the first task is encrypted with a respective encryption key of the second set of keys. The tasks may be executed in the execution environment using unencrypted content of the task inputs.
USER INTERFACE MANIPULATION IN A FLEXIBLE SCREEN DEVICE
User interface (UI) manipulation techniques are disclosed that can allow a user device to hide and obscure sensitive information displayed on a flexible, foldable, or otherwise reconfigurable display from onlookers whilst maintaining or improving its accessibility exclusively to the primary user. Examples of the disclosed techniques can manipulate the UI in a way such that it is largely only viewable as intended when the user device is physically configured to a certain folding angle (and/or viewing angle). In some examples, the UI can be customized such that it promotes a certain device configuration (e.g., folding angle) that can provide an optimum security configuration for the user's current surroundings. The UI displayed on the display screen can change in form factor (e.g., an intended size as viewed by the user) to adapt to the current surroundings and/or based on the sensitivity in the displayed content.
METHODS AND APPARATUS FOR DETECTING WHETHER A STRING OF CHARACTERS REPRESENTS MALICIOUS ACTIVITY USING MACHINE LEARNING
In some embodiments, a processor can receive an input string associated with a potentially malicious artifact and convert each character in the input string into a vector of values to define a character matrix. The processor can apply a convolution matrix to a first window of the character matrix to define a first subscore, apply the convolution matrix to a second window of the character matrix to define a second sub score and combine the first subscore and the second subscore to define a score for the convolution matrix. The processor can provide the score for the convolution matrix as an input to a machine learning threat model, identify the potentially malicious artifact as malicious based on an output of the machine learning threat model, and perform a remedial action on the potentially malicious artifact based on identifying the potentially malicious artifact as malicious.
Device for securing contents of a web page
A web page providing device includes a receiving unit and a transmitting unit. The receiving unit is configured to receive a request for a web page from a terminal. The transmitting unit is configured to transmit to the terminal the web page from which a script is readable. The script causes the terminal to execute: measuring an elapsed time from a most recent operation and determining whether the elapsed time exceeds a predetermined time; when it is determined that the elapsed time exceeds the predetermined time, changing a display mode of the web page from a normal display mode to another display mode returning the display mode of the web page to the normal display mode in a case where a reset operation is performed by the user of the terminal when the display mode of the web page is the other display mode.
METHODS AND APPARATUS FOR DETECTING WHETHER A STRING OF CHARACTERS REPRESENTS MALICIOUS ACTIVITY USING MACHINE LEARNING
In some embodiments, a processor can receive an input string associated with a potentially malicious artifact and convert each character in the input string into a vector of values to define a character matrix. The processor can apply a convolution matrix to a first window of the character matrix to define a first subscore, apply the convolution matrix to a second window of the character matrix to define a second sub score and combine the first subscore and the second subscore to define a score for the convolution matrix. The processor can provide the score for the convolution matrix as an input to a machine learning threat model, identify the potentially malicious artifact as malicious based on an output of the machine learning threat model, and perform a remedial action on the potentially malicious artifact based on identifying the potentially malicious artifact as malicious.
REMOTE CONTROL-BASED METHOD FOR PROTECTING INFORMATION ON DEVICE SCREEN
A remote control-based method for protecting information on a device screen is provided. A controlling terminal controls a controlled terminal through a remote control system, and the remote control-based method specifically includes the following steps: S1: superimposing a floating layer on a content page of a screen of the controlled terminal; S2: adjusting transparency of the floating layer to allow the content page on the screen of the controlled terminal to be invisible; S3: taking a screenshot of the controlled terminal; and S4: adjusting brightness of the screenshot to restore the content page to be normally visible and displayed at the controlling terminal. The remote control-based method can prevent screen information on a remote device from being disclosed, provide a more secure and private environment for a remote control process, and protect the security of information.
SYSTEMS AND METHODS FOR PROTECTING DATA DURING SYNCHRONIZATION
Disclosed herein are systems and method for preventing the spread of malware in a synchronized data network, the method including: receiving, at a first time by a server connected to a plurality of computing devices, a file from a first computing device; monitoring for changes to the file stored on the server; in response to detecting a change, generating a record indicative of the change to the file; receiving, at the server from a second computing device, a download request for the file at a second time; determining whether at least one record exists that indicates any change to the file between the first time and the second time; in response to determining that the record exists, scanning the file for malware; and in response to determining that the file stored on the server is associated with malware, denying the download request.
Mechanisms for locking computing devices
Various systems and methods for locking computing devices are described herein. In an example, a portable device comprises an electro-mechanical lock; and a firmware module coupled to the electro-mechanical lock, the firmware module configured to: receive an unlock code; validate the unlock code; and unlock the electro-mechanical lock when the unlock code is validated. In another example, device for managing BIOS authentication, the device comprising an NFC module, the NFC module comprising an NFC antenna; and a firmware module, wherein the firmware module is configured to: receive an unlock code from an NFC device via the NFC antenna; validate the unlock code; and unlock a BIOS of the device when the unlock code is validated.
PROGRESSIVE DEVICE LOCK
A method for securing an enterprise application on a computing device includes: defining at least one monitored action, where the monitored action is an access of sensitive information in the enterprise application, defining a maximum number of instances of the at least one monitored action to be allowed while the computing device is not secured by a device-level lock, detecting at least one instance of the at least one monitored action, determining whether the computing device is secured by the device-level lock, and if according to the determining, the computing device is not secured by the device-level lock: displaying a warning message in response to the instances, incrementing a warning counter in response to the detecting, and if the warning counter exceeds the maximum number of the instances, preventing access to the enterprise application.