Denso Corporation

Denso International America, Inc.

Gopalakrishnan Iyer

Ameer Kashani

Carlos Mora-Golding

Hirofumi Yamashita

Remma Takeuchi

Systems, methods, and other embodiments described herein relate to monitoring for unauthorized access to an electronic device. In one embodiment, a method includes acquiring a fault status about observed anomalies within a device. The observed anomalies relating to unauthorized access to the device. The method includes analyzing the fault status to identify whether the fault status satisfies a fault threshold. The method includes activating a response when the fault status satisfies the fault threshold indicating the presence of the unauthorized access.

Detecting tampering of an electronic device

Systems, methods, and other embodiments described herein relate to adaptable canary values. In one embodiment, a method includes acquiring state information about a program executing within a vehicle. The state information specifies at least a security level of segments of the program. The method includes, responsive to the program satisfying a generating threshold, generating a canary value according to the state information. The method includes inserting the canary value into a memory address associated with the program.

Dynamic adaptation of memory elements to prevent malicious attacks

Systems, methods, and other embodiments described herein relate to improving incident response within a vehicle environment. In one embodiment, a method includes, responsive to detecting an attack on a threatened component of a computing system, gathering information about the threatened component, including at least a dependency list that specifies related components to the threatened component. The method includes determining a risk score for the attack according to a risk level associated with the attack, a risk type of the threatened component, and combined risks associated with compromising the related components. The method includes providing a report specifying information about the attack, including at least the risk score.

Incident response according to risk score

A microphone controller includes a processor programmed to receive voice input from one or more microphones to be utilized in a voice recognition session initiated by the microphone controller. Further the microphone controller includes a key store including one or more keys configured to encrypt the received voice input to an encrypted voice data.

System and method for enhancing vehicle occupant voice data privacy

Systems, methods, and other embodiments described herein relate to securing software composition information in a software management environment. In one embodiment, a method includes acquiring, in a managing device, identifying information about a software package installed on a remote device, including a unique identifier of an entity associated with the software package, and a secure identifier that combines the unique identifier with a package identifier of the software package. The method includes, responsive to identifying a vulnerability, generating a vulnerability identifier using the unique identifier of the entity and a vulnerability label that identifies a vulnerable package that includes the vulnerability. The method includes comparing the vulnerability identifier with the secure identifier to determine whether the software package includes the vulnerability. The method includes providing a response about the vulnerability when the vulnerability identifier matches the secure identifier.

Securing software package composition information

Systems, methods, and other embodiments described herein relate to validating programs of a computing system in a vehicle by tracking a boot sequence. In one embodiment, a method includes, responsive to detecting initiation of a boot sequence in a computing system, tracking characteristics of programs executing as part of the boot sequence. The method includes determining whether the programs correspond with a program execution graph (PEG) by comparing the characteristics of the programs as the programs boot with the PEG. The method includes providing a response to thwart a malicious program when the boot sequence does not match the PEG.

Verifying a boot sequence through execution sequencing

A system in a vehicle includes one or more sensors configured to obtain occupant information from an occupant utilizing at least facial information of the occupant. The system also includes a controller in communication with the one or more sensors. The controller is configured to determine an application policy associated with one or more applications of the vehicle and execute the one or more applications in response to facial information exceeding a first authentication layer or second authentication layer associated with the application policy.

System and method for authenticating an occupant of a vehicle

A binary patch system for a vehicle may include a memory and a controller in communication with the memory and programmed to receive original source code, identify vulnerabilities in original source code, generate binary patch based on the identified vulnerabilities, insert binary patch into original source code, receive feedback of the inserted binary patch, and update the binary patch based on the feedback.

Binary patch reconciliation and instrumentation system

A computer device includes a memory. The computer device also includes at least one processor configured to execute a process and manage the memory for the process. The processor is further configured to execute one or more program instructions associated with an application, reach control flow transfer for the one or more program instructions, unwind a call stack associated with the one or more program instructions in response to a failure to meet a target control flow, identify an offending function call, and rewrite the offending function call. The rewritten function call includes a memory operation boundary check.

Apparatus and method of control flow integrity enforcement utilizing boundary checking

System, methods, and other embodiments described herein relate to improving control flow in a program for safety-related functions. In one embodiment, a method includes identifying a safety-related function of the program. The safety-related function is associated with functionality performed by the program that effects whether an associated device operates according to a functional safety standard. The method includes integrating a fault tree for the safety-related function into associated portions of a control flow graph of the program. The control flow graph identifies at least procedural control flows within the program, and the fault tree indicates combinations of conditions in the program that produce faults by the program. The method includes providing the control flow graph as an electronic output to improve the control flow of the program.

Systems and methods for optimizing control flow graphs for functional safety using fault tree analysis

System, methods, and other embodiments described herein relate to determining performance overhead for instrumentation within a program. In one embodiment, a method includes, in response to compiling the program from source code into machine code, analyzing the program to generate overhead scores associated with segments of instrumentation within separate functions of the program. The instrumentation is combined with the source code to provide functionality in addition to a base functionality of the program. The method includes selectively modifying the segments in the source code for the separate functions according to whether the overhead scores for respective ones of the segments satisfies an instrumentation threshold associated with respective ones of the separate functions.

Systems and methods for selectively instrumenting a program according to performance characteristics

System, methods, and other embodiments described herein relate to an improved approach to reverse engineering binary code through the use of machine learning and image processing. In one embodiment, a method includes, in response to receiving, as an electronic input, a code segment of code that is represented in a binary format, transforming the segment into an image to visually represent the binary format of the segment. The method includes generating, as an electronic output from a classifier, a segment indicator that is based, at least in part, on the image and that specifies source code corresponding to the segment in order to reverse engineer the segment into the source code using the classifier.

Systems and methods for identifying source code from binaries using machine learning

System, methods, and other embodiments described herein relate to validating data arguments in a program. In one embodiment, a method includes, in response to an electronic request, identifying a data argument within a code segment of source code of the program. The data argument is non-control data passed between one or more functions of the program. The method includes storing data characteristics about the data argument within a control flow graph derived from the source code. The control flow graph represents execution paths within the program. The data characteristics indicate a state of the data argument and at least one relationship associated with the data argument. The method includes providing the control flow graph as an electronic output to facilitate adjustments in the source code.

Systems and methods for dynamically identifying data arguments and instrumenting source code

System, methods, and other embodiments described herein relate to improving the functioning of a program. In one embodiment, a method includes, in response to detecting a code segment being added to source code of the program, identifying control flow characteristics of the source code including the code segment. The method includes updating a control flow graph of the source code according to the control flow characteristics. The control flow graph represents execution paths through the program that are comprised of nodes representing blocks of the source code and directed edges between the nodes representing transitions between the blocks. The method includes providing the control flow graph to improve functioning of the program by facilitating adjustments in the source code.

Systems and methods for dynamically identifying program control flow and instrumenting source code

System, methods, and other embodiments described herein relate to improving detection of program faults. In one embodiment, a method includes executing, in parallel, an extended program and an instrumented program. The instrumented program is an instrumented version of a baseline program that implements runtime checks. The extended program is an extended version of the baseline program with intentional delays inserted into source code of the baseline program to match an execution time with the instrumented program. The method includes supervising execution states of the instrumented program to identify an occurrence of mismatched states between the extended program and the instrumented program. The method includes managing the mismatched states to mitigate effects of the program faults on the functioning of an associated device.

Growing community of inventors

Santa Clara, CA, United States of America

Gopalakrishnan Iyer