International Business Machines Corporation

Itsec Analytics Pte. Ltd.

Trend Micro Inc.

Gordon David McIntosh

George John Dawkins

Ashwini Kulkarni

Alongkorn Kitamorn

Kanisha Patel

Gary Lee Ruzek

Prakash Vinodrai Desai

Van Hoa Lee

Edward John Silha

Mark Elliott Hack

Michael Anthony Perez

David Lee Randall

Trang N Huynh

David R Willoughby

Milton Devon Miller, Ii

Sophia Mai-Simpson

Aditi Bajoria

Aspects of this disclosure include a system, method and apparatus providing automated audio and vision based pest detection and entry denial for a beehive. The apparatus may include multiple video classification sensors that transmit a signal of the dorsal and lateral aspect of the insects to a computer running a video processing algorithms that classify all insects attempting to enter a beehive. Additionally, the apparatus may include multiple audio classification sensors that transmit audio signals to the computer for audio analysis to assist in classification. Insects classified as pests (not-a-bee) are actively excluded from the beehive.

System, method, and apparatus for active pest denial, apiary monitoring and management

Methods and systems for implementing autonomous vehicle security features. The present invention details an effective and secure methodology to implement the external management and control of autonomous vehicles by authorized personnel, usually law enforcement, through the use of intelligent sensors that can override an autonomous vehicle controller's functionality as necessary.

System, method, and apparatus to mitigate and or prevent autonomous vehicle misuse through the use of security enabled sensors

Methods and systems for preventing code injection attacks are disclosed. Embodiments include generating a random security tag and obtaining an instruction block comprising an instruction to be executed by a processor. The instruction block includes at least one no-operation (NOP) instruction at a specified location within the instruction block. A first exclusive OR with the random security tag is applied to at least one instruction at the specified location, the instruction block is stored, and fetched for passing to the processor. Prior to passing the instruction block to the processor, the instruction at the specified location is verified by applying a second exclusive OR to determine whether the instruction at the specified location is the NOP instruction. When a NOP instruction, the instruction block is passed to the processor. When not an NOP instruction, the passing the instruction block to the processor is omitted.

Systems and methods for preventing code insertion attacks

A processor, circuit and method provide for fast decryption of encrypted program instructions for execution by the processor. A programmable look-up coding is used to decode a field within the instructions. The decoded field for the instructions are recombined with the remaining portion of the same instructions to yield the decoded instructions. The programmable look-up coding can be programmed and controlled by a process executing at a higher privilege level than the program represented by the instructions, so that security against code-modifying attacks is enhanced.

Method for fast decryption of processor instructions

A method, apparatus, and computer instructions for processing instructions by a processing unit. An instruction set is dynamically set for the processing unit using a selected instruction map. The selected instruction map is selected as one being different from a normal instruction map for the processing unit. The instructions are processed at the processor using the instruction set. A set of authorized instructions are encoded using the selected instruction map.

Method and apparatus to prevent vulnerability to virus and worm attacks through instruction remapping

A method, apparatus, and computer instructions for managing operating systems. A request from an operating system is received in the multi-partitioned data processing system to register for access to hardware in the multi-partitioned data processing system. The request includes a key code for the operating system. A determination is made as to whether the operating system is an authorized operating system using the key code in response to receiving the request. The operating system is registered if the operating system is the authorized operating system. Otherwise, the operating system is terminated.

Method and apparatus for preventing loading and execution of rogue operating systems in a logical partitioned data processing system

A method and apparatus for an independent operating system that prevents certain classes of computer attacks. Instruction decryption is performed on an existing instruction set for a processor. The processor architecture limits the impact on processor execution timing. The instruction execution timing is not altered in the processor core and any additional processing is overlapped into existing operations.

Method for fast decryption of processor instructions in an encrypted instruction power architecture

A system and method to reduce external access to hypervisor interfaces in a computer system, thereby reducing the possibility of attacks. In a preferred embodiment, addresses for calls are used to fill a table, where the addresses are specifically selected for a requesting computer. For example, in one embodiment, a routine searches for the adapter type of a requesting computer and populates the table with calls specific to that type of adapter. Other types of calls are not put in the table. Instead, those calls are replaced by routines that will return an error. In other embodiments, the operating system type is used to determine what addresses are used to populate the table. These and other embodiments are explained more fully below.

Method to enhance platform firmware security for logical partition data processing systems by dynamic restriction of available external interfaces

A method, apparatus, and computer instructions for processing trace data in a logical partitioned data processing system. A partition causing an exception is identified in response to detecting the exception. The partition is one within a set of partitions in the logical partitioned data processing system. The trace data for the identified partition is stored in an error log or other data structure for a machine check interrupt handler.

Apparatus to preserve trace data

A method, apparatus, and computer instructions in a logical partitioned data processing system for managing trace data. A call is received for the trace data from a calling partition within a plurality of partitions in the logical partitioned data processing system. The trace data in a buffer associated with the calling partition to form identified trace data is identified. Only the identified trace data for the calling partition is returned. The trace data for other partitions within the plurality of partitions is not returned to the calling partition.

Method and apparatus to eliminate interpartition covert storage channel and partition analysis

A method for processing instructions by a processing unit. An instruction set is dynamically set for the processing unit using a selected instruction map. The selected instruction map is selected as one being different from a normal instruction map for the processing unit. The instructions are processed at the processor using the instruction set. A set of authorized instructions are encoded using the selected instruction map.

Method to prevent vulnerability to virus and worm attacks through instruction remapping

A method for managing operating systems. A request from an operating system is received in the multi-partitioned data processing system to register for access to hardware in the multi-partitioned data processing system. The request includes a key code for the operating system. A determination is made as to whether the operating system is an authorized operating system using the key code in response to receiving the request. The operating system is registered if the operating system is the authorized operating system. Otherwise, the operating system is terminated.

Method for preventing loading and execution of rogue operating systems in a logical partitioned data processing system

A method, apparatus, and computer instructions for preserving trace data in a logical partitioned data processing system. A call is received from a partition in a plurality of partitions to register a buffer in the partition for the trace data. The call includes a pointer to the buffer. The buffer is associated with a trace routine in platform firmware. The trace routine stores the trace data for calls made by the partition to the platform firmware in the buffer.

Growing community of inventors

Austin, TX, United States of America

Gordon David McIntosh