Cisco Technology, Inc.

William E Jacobs

Adrian Mircea Proca

Rafael Mantilla Montalvo

Kurt W Bailey

A method is provided in one example embodiment and includes storing secure boot variables in a baseboard management controller; and sending the secure boot variables to a basic input/output system (BIOS) during a power on self-test, where the BIOS utilizes the secure boot variables during runtime to authenticate drivers and an operating system loader execution. In particular embodiments, the secure boot variables may be included in a white list, a black list, or a key list and, further, stored in erasable programmable read only memory.

Out of band management of basic input/output system secure boot variables

A plurality of pages of code executing via a container host operating system are monitored. The plurality of pages of code include pages of code from a plurality of container applications configured to utilize the container host operating system. A determination is made that a page of code of the plurality of pages of code violates a security policy configured to apply security within the container host operating system. A container application of the plurality of container applications is identified as a source of the page of code of the plurality of pages of code. The security policy is applied to the container application of the plurality of container applications in response to identifying the container application of the plurality of container applications as the source of the page of code.

Container application security and protection

Techniques are provided for actively managing secure boot variables. Such techniques include receiving a request from an entity to modify a portion of a basic input/output system (BIOS), the request including a data segment, and verifying that the requesting entity is authorized to modify a portion of the BIOS. In response to verifying that the requesting entity is authorized, the portion of the BIOS is modified based on the received request and the data segment, and a copy of the data segment is stored in a file on a physical memory that is communicatively coupled to the BIOS. If the BIOS is updated, thereby erasing part or all of the secure boot variables that are stored in the BIOS, the record of changes of the secure boot variables along with default authenticated variables may be used to restore the secure boot variables to a state prior to the BIOS update.

Synchronization of UEFI secure boot variables on a managed server

A method is provided in one example embodiment that includes storing a reference measurement of an object in a trusted storage and retrieving the reference measurement from the trusted storage before an operating system is loaded. In a pre-operating system environment, the reference measurement can be compared with a golden measurement and a policy action can be applied if a variance is detected between the reference measurement and the golden measurement. In more particular embodiments, the reference measurement is a measurement of firmware, and yet more particularly, the measurement is a hash of the firmware.

System and method for verifying integrity of platform object using locally stored measurement

Systems and methods for performing digital image stabilization implemented in a digital camera. The digital camera includes a gyroscope to measure motion of the digital camera and processes the signals from the gyroscope to track the total displacement of an image sensor over a series of frames of video. The algorithm implemented by the digital camera includes a processing block for correcting a DC bias in the signals from the gyroscope, a filter for attenuating the signals during periods of high acceleration, a processing block for detecting the start of a panning motion, and a processing block for quickly retracing the digital image stabilization correction back to the center of the image sensor during a panning motion.

Systems and methods for performing gyroscopic image stabilization

Systems and methods for performing fast zero recovery with alpha blending with digital image stabilization implemented in a digital camera. The digital camera includes a gyroscope to measure motion of the digital camera and processes the signals from the gyroscope to track the total displacement of an image sensor over a series of frames of video. If the motion is a sustained motion in a substantially uniform direction, then the digital camera recognizes the motion as a panning-type motion and activates a fast-zero recovery with alpha blending operation to retrace the displacement of active pixel locations to the center of the image sensor. Alpha blending is performed to smooth the transition from a normal image stabilization operation to the fast-zero recovery with alpha blending operation.

Growing community of inventors

Beaverton, OR, United States of America

William E Jacobs