Hewlett-packard Development Company, L.P.

Hewlett-packard Company

Hewlett Packard Enterprise Development LP

John R Diamant

Robert Campbell

Wade James Satterfield

Evan R Zweifel

Keith R Buck

Edgar Circenis

Daniel Edward Herington

Paul Bouchier

Gerald J Kaufman, Jr

Wan-Yen Hsu

Ian A Elliott

Gary L Thunquest

Eric C Scoredos

David Lin

Kam Chooi Wong

Timothy J Duesing

Shane Unruh

When a computer system process is acting contrary to the rules established for that process for the resource it is running on, the process is moved to a quarantined section and its continued operation is isolated from other processes. While in isolation, the quarantined process is tested and appropriate action, such as, for example, rehabilitation, change of the rules, or termination, is performed. The divided quarantined sections are used for each misbehaving process.

Automatic isolation of misbehaving processes on a computer system

A computer system and method responds to a compromise of a first computer node by automatically hardening one or more uncompromised nodes of the system.

Automatic hardening of an uncompromised computer node

An embodiment of the invention provides an apparatus and method for automatic detection of a vulnerability exploit. The apparatus and method are configured to post a security vulnerability warning indicating a vulnerability of software; provide an exploit detector; and use the exploit detector to detect an attempted exploit that targets the vulnerability.

Automatic detection of vulnerability exploits

A method for updating software is disclosed. The method includes accessing system data associated with a client and determining known issues to be resolved associated with the client based on the system data. The method also includes accessing system update preferences associated with the client, the system update preferences representing a minimum system status level and determining if the client satisfies the minimum system status level based on the update preferences and based on the system data.

System and method for defining software management

To control update of content in a programmable read-only memory in a system, the security status associated with the system is determined, where the security status is one of a secure mode and non-secure mode. In response to detecting that the system is in secure mode, a write to the programmable read-only memory is enabled. In response to detecting that the system is in non-secure mode, a write to the programmable read-only memory is disabled.

Controlling update of content of a programmable read-only memory

A tamper-evident data management system uses public-private digital signature keys to control use of data and to ensure the fidelity of data that is stored on a customer's system for later collection by a computer vendor or that is sent to the vendor over a network. A computer system includes an application for collecting usage or metrics data from the computer system, for example. The metering application uses an application private key to digitally sign all metrics data prior to optionally storing the data in a data log file. The vendor can then use an application public key to validate the digitally signed entries. The digitally signed data entries may also be encrypted using a vendor public key prior to storage in the data log and may be decrypted using a vendor private key prior to validating the digitally signed data. The application and application private key may be stored on a smart card to discourage and detect tampering or may be stored on the computer system itself.

Tamper-evident data management

The present invention provides a computer system with a chronology generator for generating a chronology for a series of computer configurations.

Computer configuration chronology generator

A system that automatically detects logical errors when compiling a program. The system detects such logical errors as a signal handler routine modifying the errno global variable, a signal handler routine calling a non-reentrant library function, a signal handler routine calling a non-reentrant user function, and a signal handler routine calling a memory allocation function without first disabling all other signal handlers. The system also detects using '/n' at the end of a string.

Method for locating errors in a computer program

A system that automatically detects logical errors when compiling a program. The system detects such logical errors as calling a virtual function of a class passed into a function by value; virtual functions called from constructors or destructors; multiple definitions of classes, enums, or typedefs; multiple declarations of an object; mixing standard C I/O routines with C++ routines; a member function or data of a class hiding inherited member function or data; problems with the order of dynamic initialization; or failing to initialize non-static and non-class data members. The system also will suggest the use of the contact attribute for a member function that does not modify data members and suggest the use of const for parameters of functions when the parameter is not modified.

A task manager for providing personal organization, project management, and process automation capabilities. The task manager maintains a hierarchical list of tasks for an individual. For each task, notes can be kept, priorities set, and progress tracked. Also, subsets of the task hierarchy can be shared. Every task in the task manager belongs to a class, and each class includes pre-defined automatic actions and manual actions. The pre-defined automatic actions are automatically executed by the task manager when the task is being worked on. The manual actions aid in task execution because the relevant operations (that is, the manual actions) are available when the task is being worked on. The task manager communicates with agents, tools, and process engines via a message system. The agents, tools, and process engine may receive task information from the task manager and may also remotely control the task manager.

Growing community of inventors

Fort Collins, CO, United States of America

John R Diamant