Method and system for preventing and detecting security threats
AssigneeIrdeto B.V.
InventorRon Vandergeest
Life of this patent
Estimating the term…
Abstract
A system and method is provided for implementing platform security on a consumer electronic device having an open development platform. The device is of the type which includes an abstraction layer operable between device hardware and application software. A secured software agent is provided for embedding within the abstraction layer forming the operating system. The secured software agent is configured to limit access to the abstraction layer by either blocking loadable kernel modules from loading, blocking writing to the system call table or blocking requests to attach debug utilities to certified applications or kernel components.
Claims20
A method for increasing security of a computing device running an operating system and at least one application, the method comprising:
- embedding a secured software agent within an OS kernel of the operating system;
- authenticating, by a Java layer, communication between machine executable code of a Dalvik layer and the secured software agent;
- providing a bridge between the at least one application and the secured software agent;
- and
- verifying, by the secured software agent, an integrity of the at least one application.
An apparatus for increasing security of a computing device running an operating system and at least one application, comprising:
- at least one processor;
- and
- at least one memory operatively coupled to the at least one processor and having instructions stored therein which, when executed by the at least one processor, cause the at least one processor to:
- embed a secured software agent within an OS kernel of the operating system;
- authenticate, by a Java layer, communication between machine executable code of a Dalvik layer and the secured software agent;
- provide a bridge between the at least one application and the secured software agent;
- and
- verify, by the secured software agent, an integrity of the at least one application.
Dependencies are inferred from the claim text.