HARDWARE-BASED VIRTUALIZED SECURITY ISOLATION
A host operating system running on a computing device monitors network communications for the computing device to identify network resources that are requested by the computing device. The host operating system compares requested network resources against security policies to determine if the reques...
Gespeichert in:
| Hauptverfasser: | , , , , , , , , , , , |
|---|---|
| Format: | Patent |
| Sprache: | eng |
| Schlagworte: | |
| Online-Zugang: | Volltext bestellen |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| container_end_page | |
|---|---|
| container_issue | |
| container_start_page | |
| container_title | |
| container_volume | |
| creator | PULAPAKA, Hari R GADDEHOSUR, Poornananda R SMITH, Frederick J PASHOV, Ivan Dimitrov RAO, Vikram Mangalore VISWANATHAN, Giridhar PAI, Navin Narayan REUTHER, Lars DIAZ CUELLAR, Gerardo SCHULTZ, Benjamin M EBERSOL, Michael B JEFFRIES, Charles G |
| description | A host operating system running on a computing device monitors network communications for the computing device to identify network resources that are requested by the computing device. The host operating system compares requested network resources against security policies to determine if the requested network resources are trusted. When an untrusted network resource is identified, the host operating system accesses the untrusted network resource within a container that is isolated from the host operating system kernel using techniques discussed herein. By restricting access to untrusted network resources to isolated containers, the host operating system is protected from even kernel-level attacks or infections that may result from an untrusted network resource. |
| format | Patent |
| fullrecord | <record><control><sourceid>epo_EVB</sourceid><recordid>TN_cdi_epo_espacenet_PH12018550196A1</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><sourcerecordid>PH12018550196A1</sourcerecordid><originalsourceid>FETCH-epo_espacenet_PH12018550196A13</originalsourceid><addsrcrecordid>eNrjZND1cAxyCXcMctV1cgx2dVEI8wwKCXX08YwCsoNdnUODPEMiFTyD_X0cQzz9_XgYWNMSc4pTeaE0N4OKm2uIs4duakF-fGpxQWJyal5qSXyAh6GRgaGFqamBoaWZo6ExkcoAv9snDQ</addsrcrecordid><sourcetype>Open Access Repository</sourcetype><iscdi>true</iscdi><recordtype>patent</recordtype></control><display><type>patent</type><title>HARDWARE-BASED VIRTUALIZED SECURITY ISOLATION</title><source>esp@cenet</source><creator>PULAPAKA, Hari R ; GADDEHOSUR, Poornananda R ; SMITH, Frederick J ; PASHOV, Ivan Dimitrov ; RAO, Vikram Mangalore ; VISWANATHAN, Giridhar ; PAI, Navin Narayan ; REUTHER, Lars ; DIAZ CUELLAR, Gerardo ; SCHULTZ, Benjamin M ; EBERSOL, Michael B ; JEFFRIES, Charles G</creator><creatorcontrib>PULAPAKA, Hari R ; GADDEHOSUR, Poornananda R ; SMITH, Frederick J ; PASHOV, Ivan Dimitrov ; RAO, Vikram Mangalore ; VISWANATHAN, Giridhar ; PAI, Navin Narayan ; REUTHER, Lars ; DIAZ CUELLAR, Gerardo ; SCHULTZ, Benjamin M ; EBERSOL, Michael B ; JEFFRIES, Charles G</creatorcontrib><description>A host operating system running on a computing device monitors network communications for the computing device to identify network resources that are requested by the computing device. The host operating system compares requested network resources against security policies to determine if the requested network resources are trusted. When an untrusted network resource is identified, the host operating system accesses the untrusted network resource within a container that is isolated from the host operating system kernel using techniques discussed herein. By restricting access to untrusted network resources to isolated containers, the host operating system is protected from even kernel-level attacks or infections that may result from an untrusted network resource.</description><language>eng</language><subject>CALCULATING ; COMPUTING ; COUNTING ; ELECTRIC DIGITAL DATA PROCESSING ; PHYSICS</subject><creationdate>2019</creationdate><oa>free_for_read</oa><woscitedreferencessubscribed>false</woscitedreferencessubscribed></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><linktohtml>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&date=20190930&DB=EPODOC&CC=PH&NR=12018550196A1$$EHTML$$P50$$Gepo$$Hfree_for_read</linktohtml><link.rule.ids>230,309,781,886,25568,76551</link.rule.ids><linktorsrc>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&date=20190930&DB=EPODOC&CC=PH&NR=12018550196A1$$EView_record_in_European_Patent_Office$$FView_record_in_$$GEuropean_Patent_Office$$Hfree_for_read</linktorsrc></links><search><creatorcontrib>PULAPAKA, Hari R</creatorcontrib><creatorcontrib>GADDEHOSUR, Poornananda R</creatorcontrib><creatorcontrib>SMITH, Frederick J</creatorcontrib><creatorcontrib>PASHOV, Ivan Dimitrov</creatorcontrib><creatorcontrib>RAO, Vikram Mangalore</creatorcontrib><creatorcontrib>VISWANATHAN, Giridhar</creatorcontrib><creatorcontrib>PAI, Navin Narayan</creatorcontrib><creatorcontrib>REUTHER, Lars</creatorcontrib><creatorcontrib>DIAZ CUELLAR, Gerardo</creatorcontrib><creatorcontrib>SCHULTZ, Benjamin M</creatorcontrib><creatorcontrib>EBERSOL, Michael B</creatorcontrib><creatorcontrib>JEFFRIES, Charles G</creatorcontrib><title>HARDWARE-BASED VIRTUALIZED SECURITY ISOLATION</title><description>A host operating system running on a computing device monitors network communications for the computing device to identify network resources that are requested by the computing device. The host operating system compares requested network resources against security policies to determine if the requested network resources are trusted. When an untrusted network resource is identified, the host operating system accesses the untrusted network resource within a container that is isolated from the host operating system kernel using techniques discussed herein. By restricting access to untrusted network resources to isolated containers, the host operating system is protected from even kernel-level attacks or infections that may result from an untrusted network resource.</description><subject>CALCULATING</subject><subject>COMPUTING</subject><subject>COUNTING</subject><subject>ELECTRIC DIGITAL DATA PROCESSING</subject><subject>PHYSICS</subject><fulltext>true</fulltext><rsrctype>patent</rsrctype><creationdate>2019</creationdate><recordtype>patent</recordtype><sourceid>EVB</sourceid><recordid>eNrjZND1cAxyCXcMctV1cgx2dVEI8wwKCXX08YwCsoNdnUODPEMiFTyD_X0cQzz9_XgYWNMSc4pTeaE0N4OKm2uIs4duakF-fGpxQWJyal5qSXyAh6GRgaGFqamBoaWZo6ExkcoAv9snDQ</recordid><startdate>20190930</startdate><enddate>20190930</enddate><creator>PULAPAKA, Hari R</creator><creator>GADDEHOSUR, Poornananda R</creator><creator>SMITH, Frederick J</creator><creator>PASHOV, Ivan Dimitrov</creator><creator>RAO, Vikram Mangalore</creator><creator>VISWANATHAN, Giridhar</creator><creator>PAI, Navin Narayan</creator><creator>REUTHER, Lars</creator><creator>DIAZ CUELLAR, Gerardo</creator><creator>SCHULTZ, Benjamin M</creator><creator>EBERSOL, Michael B</creator><creator>JEFFRIES, Charles G</creator><scope>EVB</scope></search><sort><creationdate>20190930</creationdate><title>HARDWARE-BASED VIRTUALIZED SECURITY ISOLATION</title><author>PULAPAKA, Hari R ; GADDEHOSUR, Poornananda R ; SMITH, Frederick J ; PASHOV, Ivan Dimitrov ; RAO, Vikram Mangalore ; VISWANATHAN, Giridhar ; PAI, Navin Narayan ; REUTHER, Lars ; DIAZ CUELLAR, Gerardo ; SCHULTZ, Benjamin M ; EBERSOL, Michael B ; JEFFRIES, Charles G</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-epo_espacenet_PH12018550196A13</frbrgroupid><rsrctype>patents</rsrctype><prefilter>patents</prefilter><language>eng</language><creationdate>2019</creationdate><topic>CALCULATING</topic><topic>COMPUTING</topic><topic>COUNTING</topic><topic>ELECTRIC DIGITAL DATA PROCESSING</topic><topic>PHYSICS</topic><toplevel>online_resources</toplevel><creatorcontrib>PULAPAKA, Hari R</creatorcontrib><creatorcontrib>GADDEHOSUR, Poornananda R</creatorcontrib><creatorcontrib>SMITH, Frederick J</creatorcontrib><creatorcontrib>PASHOV, Ivan Dimitrov</creatorcontrib><creatorcontrib>RAO, Vikram Mangalore</creatorcontrib><creatorcontrib>VISWANATHAN, Giridhar</creatorcontrib><creatorcontrib>PAI, Navin Narayan</creatorcontrib><creatorcontrib>REUTHER, Lars</creatorcontrib><creatorcontrib>DIAZ CUELLAR, Gerardo</creatorcontrib><creatorcontrib>SCHULTZ, Benjamin M</creatorcontrib><creatorcontrib>EBERSOL, Michael B</creatorcontrib><creatorcontrib>JEFFRIES, Charles G</creatorcontrib><collection>esp@cenet</collection></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext_linktorsrc</fulltext></delivery><addata><au>PULAPAKA, Hari R</au><au>GADDEHOSUR, Poornananda R</au><au>SMITH, Frederick J</au><au>PASHOV, Ivan Dimitrov</au><au>RAO, Vikram Mangalore</au><au>VISWANATHAN, Giridhar</au><au>PAI, Navin Narayan</au><au>REUTHER, Lars</au><au>DIAZ CUELLAR, Gerardo</au><au>SCHULTZ, Benjamin M</au><au>EBERSOL, Michael B</au><au>JEFFRIES, Charles G</au><format>patent</format><genre>patent</genre><ristype>GEN</ristype><title>HARDWARE-BASED VIRTUALIZED SECURITY ISOLATION</title><date>2019-09-30</date><risdate>2019</risdate><abstract>A host operating system running on a computing device monitors network communications for the computing device to identify network resources that are requested by the computing device. The host operating system compares requested network resources against security policies to determine if the requested network resources are trusted. When an untrusted network resource is identified, the host operating system accesses the untrusted network resource within a container that is isolated from the host operating system kernel using techniques discussed herein. By restricting access to untrusted network resources to isolated containers, the host operating system is protected from even kernel-level attacks or infections that may result from an untrusted network resource.</abstract><oa>free_for_read</oa></addata></record> |
| fulltext | fulltext_linktorsrc |
| identifier | |
| ispartof | |
| issn | |
| language | eng |
| recordid | cdi_epo_espacenet_PH12018550196A1 |
| source | esp@cenet |
| subjects | CALCULATING COMPUTING COUNTING ELECTRIC DIGITAL DATA PROCESSING PHYSICS |
| title | HARDWARE-BASED VIRTUALIZED SECURITY ISOLATION |
| url | https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2024-12-17T00%3A56%3A39IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-epo_EVB&rft_val_fmt=info:ofi/fmt:kev:mtx:patent&rft.genre=patent&rft.au=PULAPAKA,%20Hari%20R&rft.date=2019-09-30&rft_id=info:doi/&rft_dat=%3Cepo_EVB%3EPH12018550196A1%3C/epo_EVB%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_id=info:pmid/&rfr_iscdi=true |