Blackberry Corporation

Malikie Innovations Limited

Adam John Boulton

Benjamin John Godwood

William James McCourt

Paul Compton Hirst

Neil David Jonathan Duggan

Stephen John Barrett

Nicholas James Russell

Vincenzo Kazimierz Marcovecchio

Jonathon Brookfield

Niall Fitzgibbon

Niko Ashley Hammond

William James Mccourt

Systems, methods, and software can be used to identify security risks in software code based on software bill of materials (SBOM). In some aspects, a method includes: obtaining, by a server, software code and a SBOM corresponding to the software code; identifying, by the server and based on the SBOM, a library used by the software code; and generating, by the server, a risk assessment based on at least one metric corresponding to the library, where the at least one metric is associated with one or more maintainers of the library.

Risk assessment based on software bill of materials

Systems, methods, and software can be used to identify security risks in software code based on Software Bill of Materials (SBOM). In some aspects, a method includes: obtaining, by a server, software code and a SBOM corresponding to the software code; identifying, by the server and based on the SBOM, a library used by the software code; and generating, by the server, a risk assessment based on at least one metric corresponding to the library, where the at least one metric is associated with one or more maintainers of the library.

Risk assessment based on augmented software bill of materials

A method of processing data for a driving automation system, the method comprising steps of: obtaining image data from a camera of an autonomous vehicle, AV; image processing the image data to obtain a vehicle registration mark, VRM, of another vehicle within the surrounding area of the AV; looking up the VRM in a vehicle information database to obtain information indicative of the make, the model and the date of manufacture of the other vehicle; looking up information indicative of the make, the model and the date of manufacture of the other vehicle in a vehicle dimensions database to obtain at least one dimension of the other vehicle; and updating a context of the autonomous vehicle based on said at least one dimension of the other vehicle.

Processing data for driving automation system

A computer includes a memory and a processor programmed to execute instructions stored in the memory. The instructions include identifying a function in a binary file, assigning one of a plurality of classifications to the function, and determining that the function requires stack cookie protection based at least in part on the classification assigned to the function.

Binary image stack cookie protection

A method of processing data for a driving automation system, the method comprising steps of: obtaining sound data from a microphone of an autonomous vehicle; processing the sound data to obtain a sound characteristic; and updating a context of the autonomous vehicle based on the sound characteristic.

A verification server comprising a memory and a processor programmed to execute instructions stored in the memory. The instructions include receiving a link registration request including a third-party link to a third-party server, validating the third-party server as a result of receiving the link registration request, generating a unique code as a result of validating the third-party server, and generating a custom link that includes the unique code.

Managing third party URL distribution

A computer-implemented method of selectively installing an application from an application archive file is disclosed. The method includes receiving an indication to install an application on a computing device, the application being available for download as an archive file storing a manifest file and one or more installation files. The method further includes determining that installation of the application is permissible. The determining includes: without downloading the archive file, downloading at least a portion of the manifest file; and determining, based on the at least a portion of the manifest file, that installation of the application on the computing device would comply with a device management policy for the computing device. After determining that installation of the application is permissible, the archive file is downloaded and the application is installed therefrom. Related computer-readable media and computer systems are also disclosed.

Selectively installing applications based on manifest files

Described are methods and devices to identify vulnerabilities in a software package that includes two or more build files. The build files include at least an application file and one or more resource files. The method includes scanning the build files to identify strings. Strings that appear in one of the resource files and are not referenced in the application file are labelled orphaned. Strings that appear in the application file and are node defined in any of the resources files are labelled hardcoded. The identity of hardcoded and orphaned strings is output as potential vulnerabilities or data leakage points.

Binary static analysis of application structure to identify vulnerabilities

A method for evaluating contextual risk profiles at a computing device () in a vehicle (), the method including obtaining information about a proximate vehicle (); utilizing the information to create a risk profile for the proximate vehicle (); and based on the risk profile, initiating an action at computing device ().

Method and system for evaluating contextual risk profiles in a vehicle

Systems, methods, and software can be used to detect stack cookie utilization in a binary software component using binary static analysis. In some aspects, one computer-implemented method includes identifying a function defined in the binary software component, the function including one or more instructions; performing a binary static analysis of the function to determine whether the function utilizes stack cookie protection based on the one or more instructions including one or more stack cookie handling instructions; and in response to determining that the function utilizes stack cookie protection, updating a security report for the binary software component to indicate that the function utilizes stack cookie protection.

Detecting stack cookie utilization in a binary software component using binary static analysis

Systems, methods, and software can be used to analyze binary software codes. In some aspects, a computer-implemented method comprises: scanning, by at least one hardware processor, a binary software code to identify one or more text strings; associating, by the at least one hardware processor, the binary software code with a software platform based on the identified one or more text strings; disassembling, by the at least one hardware processor, the binary software code based on the software platform associated with the binary software code; and detecting, by the at least one hardware processor, a security risk in the disassembled binary software code.

Analyzing binary software code

Systems, methods, and software can be used to determine security risks of software services on a cloud computing platform. In some aspects, a computer-implemented method comprises: receiving, by a software service application executing on a cloud computing platform, a request for a software service provided by the software service application; identifying, by the software service application, a resource that is triggered by the request; determining, by the software service application, that the request has a security risk based on a security policy associated with the resource; and in response to the determining, generating, by the software service application, a security notification indicating the security risk.

Determining security risks for software services in a cloud computing platform

Systems, methods, and software can be used to analyze security risks of a binary software code. In some aspects, a computer-implemented method comprises: receiving, by at least one hardware processor, a binary software code; determining, by the at least one hardware processor, a security risk value for each of a plurality of security risk factors of the binary software code; for each of the plurality of security risk factors, determining, by the at least one hardware processor, a security confidence level of the respective security risk factor; and generating, by the at least one hardware processor, a security notification, wherein the security notification includes the security confidence levels corresponding to the plurality of security risk factors.

Growing community of inventors

Wirral, United Kingdom

Adam John Boulton