Sri International

Deepfactor, Inc.

Cisco Technology, Inc.

Scott Oberg

Hassen Saidi

Jeffrey E Casper

Christopher S Lockett

Sean Forsberg

Michael Kevin Larkin

Rizwan Merchant

Vikas Wadhvani

Sek Meng Chai

Michael E Locasto

Nicholas Vitovitch

Michael Deleo

Rutuja Phase

Systems, methods, and computer-readable media for intelligent webhook are described herein. The intelligent webhook can insert code into one or containers associated with an application being deployed by an orchestration service. The code enables the intelligent webhook to monitor operations, including startup, of a container mutated to include the code. The intelligent webhook has knowledge of whether a mutated container failed to startup in a prior instance, and if it fails, the intelligent webhook can insert a modified version of the code and/or adjust resource limit constraints to facilitate mutation of a container scheduled to be deployed with an application.

Systems, methods, and computer readable media for intelligent mutating admission webhook

Systems, methods, and computer-readable media for intercepting telemetry events obtained during operation of an application and analyzing the telemetry events are provided. The telemetry events are intercepted at the library level by interposing on application calls to a native library. The telemetry events are collected and transmitted to a platform that analyzes the collected events and presents information based on the analysis.

Systems, methods, and computer-readable media for analyzing intercepted telemetry events to generate vulnerability reports

Systems, methods, and computer-readable media for performing web app scans of an application are provided. Telemetry events derived from the web app scan are intercepted by a runtime that has been instrumented in conjunction with the application. The telemetry events are collected and transmitted to a platform that analyzes the collected events and presents information based on the analysis.

Systems, methods, and computer-readable media for executing a web application scan service

A method, apparatus and system for malware characterization includes receiving data identifying a presence of at least one anomaly of a respective portion of a processing function captured by at least one of each of at least two different sensor payloads and one sensor payload at two different times, determining a correlation between the at least two anomalies identified by the data captured by the at least one sensor payloads, and determining a presence of malware in the processing function based on the determined correlation. The method, apparatus and system can further include predicting an occurrence of at least one anomaly in the network based on at least one of current sensor payload data or previously observed and stored sensor payload data, recommending and/or initiating a remediation action and reporting a result of the malware characterization to a user.

Method of malware characterization and prediction

An integrity verification subsystem can verify the integrity of software and firmware modules on a computing device at load time and/or at run time, independently of any operating systems that may be installed on the computing device. Some versions of the integrity verification subsystem can operate in physical and/or virtualized system environments, including virtualized mobile device architectures.

Operating system-independent integrity verification

A provisioning system can separately and independently provision different components for different purposes on a computing platform, and enforce component-specific purposes associated with the use of the individual provisioned components during operation of the platform. Some versions of the provisioning subsystem may operate on a virtualized mobile computing device and networked devices under control of the computing device. In some embodiments, the provisioning subsystem can enforce a desired 'purpose' of a provisioned component while simultaneously denying a corresponding 'anti-purpose.'

Componentized provisioning

A policy arbitration system manages the fundamental communications and isolation between executable components and shared system resources of a computing device, and controls the use of the shared resources by the executable components. Some versions of the policy arbitration system operate on a virtualized mobile computing device to dynamically compile and implement policy rules that are issued periodically by multiple different independent execution environments that are running on the computing device. Semi-dynamic policy changes allow for context enabled policy changes that enforce the desired system and component 'purpose' while simultaneously denying the 'anti-purpose'.

Flexible policy arbitration control suite

Polymorphic computing architectures can support and control separate, independently executable domains and other components on a computing platform. In some embodiments, the architectures may control the different domains and/or components according to different purposes. In some embodiments, the architectures can control domains and/or components to enforce a desired 'purpose' of a domain/component while simultaneously denying a corresponding 'anti-purpose'.

Polymorphic computing architectures

A domain manager system as disclosed herein can control the selective activation of multiple independently-operable execution environments or domains on a computing device in accordance with one or more policies. In some embodiments, activation of a domain may at least temporarily transform a general purpose computing device into a specific purpose computing device or 'appliance' by disabling use of one or more shared system resources by other domains.

Growing community of inventors

Paso Robles, CA, United States of America

Scott Oberg