Hewlett-Packard Development Company, L.p.

Hewlett Packard Enterprise Development LP

Christopher Ian Dalton

David Plaquin

Valiuddin Y Ali

Lan Wang

Boris Balacheff

Pratyusa Kumar Manadhata

Michael John Wray

Adrian John Baldwin

Manuel Novoa

Jonathan Griffin

Geoffrey Ndu

Stuart Haber

Daniel Cameron Ellam

Jeffrey C Parker

Adrian Shaw

Shab H Madina

Ronny Chevalier

Pierre Belgarric

Guillaume Hiet

Serdar Cabuk

Pierre Louis Robert Belgarric

A monitoring device for verifying the integrity of a software of a memory device is disclosed. The monitoring device comprises a processor and a memory, the memory containing instructions executable by the processor, such that the processor is to; receive first information on at least one physical side-effect of a computer apparatus as a result of an instruction of a monitored software being executed by the computing apparatus. The processor is also to receive second information on the monitored software being executed, and based on the first information and the second information, the processor is to determine if the monitored software is compromised.

Devices for verifying the integrity of software

In an example, an apparatus is described. The apparatus comprises processing circuitry comprising a control module. The control module determines whether a computing device communicatively coupled to the control module is in a specified state for executing a machine learning model controlled by a third party entity. In response to determining that the computing device is in the specified state, the control module is to send, to an attestation module in a data processing pipeline associated with the computing device, an indication that the computing device is in the specified state.

Controlling execution of machine learning models

A method is provided, comprising actively testing the access control policy of a software target using a probing logic. The method further comprises determining whether an intrusion in the software target has occurred based on monitored side effects. According to the method, the probing logic is to execute at least one operation that is forbidden by the access control policy. The probing logic is further to create at least one predetermined observable side effect based on the successful execution of the operation.

Active testing of access control policy

A computing platformruns a compartmented operating systemand includes a trusted devicefor forming an integrity metric which a user can interrogate to confirm integrity of the operating system. Also, the integrity of an individual compartmentis verified by examining status information for that compartment including, for example, the identity of any open network connections, the identity of any running processes, and the status of a section of file space allocated to that compartment. Hence, the integrity of an individual compartmentof the compartmented operating systemcan be demonstrated.

Demonstrating integrity of a compartment of a compartmented operating system

A computer system includes an authentication service running in a virtual machine. The authentication service uses the hardware components of the computer system in performing a user authentication process and responds to a remote call from another virtual machine by performing the user authentication process and returning a result.

Providing temporary exclusive hardware access to virtual machine while performing user authentication

A virtual network has network interfaces coupled by tunnels () through a forwarding network (), each interface having a forwarding address in an address space of the forwarding network, each network interface having a reconfigurable address mapper () for determining a forwarding address for a packet, and encapsulating the packet with its forwarding address so that the forwarding network can forward the data packet transparent to its destination address. The network interface automatically configures the address mapper by sending a discovery request for a given virtual network address over the forwarding network, to prompt a response with an indication of the corresponding forwarding address, and to use the indication in such a response to configure the address mapper. This can ease the administrative burden of setting up and maintaining the address mapper and to ease network reconfiguration according to demand or faults for example.

Mapping discovery for virtual network

A virtual network has virtual machines on physical devices connected to network interfaces each coupled by tunnels () through a forwarding network (), each interface having a forwarding address in an address space of the forwarding network, each network interface having a reconfigurable address mapper () for determining a forwarding address for a packet, and encapsulating the packet with its forwarding address so that the forwarding network can deliver the data packet to the remote physical device having that forwarding address. Such encapsulation enables virtual machines on different physical devices to communicate transparently to the underlying forwarding network. Virtual networks can be created to suit their applications yet use or share existing forwarding networks, while protecting the forwarding network from interference by the virtual machines, and maintaining isolation between virtual machines.

Network virtualization

A method and apparatus are provided for tracking the state of a software component in use on a computing platform. Upon a change of a first type in the software component (such as a change to an integrity-critical part of the component), an appropriate integrity metric of the software component is reliably measured and recorded in cumulative combination with any previous integrity metric values recorded for changes of the first type to the software component. Upon a change of a second type in the software component (such as a change to a non integrity-critical part of the component), an appropriate integrity metric of the software component is reliably measured and recorded as a replacement for any previous integrity metric value recorded for changes of the second type to the software component. The two resultant values provide an indication of the integrity state of the software component.

Dynamic trust management

A processruns directly on a host operating system, until the processattempts an operation which can affect security of the host operating system(such as loading a kernel module or using system privileges). A guest operating systemis then provided running as a virtual machine session within a compartmentof the host operating systemand running of the processcontinues using the guest operating system. Operations of the processwhich can affect security of the host operating systemare instead performed on the guest operating system, giving greater security. The guest operating systemis only invoked selectively, leading to greater overall efficiency.

Growing community of inventors

Bristol, United Kingdom

Christopher Ian Dalton