Back to results
US 11,106,791 B2Granted
Determining security risks in binary software code based on network addresses
AssigneeBlackBerry Limited
InventorAdam John Boulton
Life of this patent
Estimating the term…
Abstract
Systems, methods, and software can be used to analyze security risks of a set of binary software code. In some aspects, a computer-implemented method comprises: scanning, by at least one hardware processor, a set of binary software code to identify one or more network addresses accessed by the set of binary software code; for each of the one or more network addresses: determining, by the at least one hardware processor, security level information of the network addresses; and generating, by the at least one hardware processor, a security notification based on the determined security level information for the one or more network addresses, wherein the security notification indicates a security risk of the set of binary software code.
Claims14
A computer-implemented method, comprising:
- scanning, by at least one hardware processor, a set of binary software code in an executable binary code form to identify one or more network addresses accessed by the set of binary software code, wherein the scanning comprises:
- scanning a byte stream of the set of binary software code to identify binary numbers that correspond to text characters based on a text encoding protocol;
- identifying one or more text strings represented by the binary numbers;
- and
- identifying the one or more network addresses corresponding to the one or more text strings;
- for each of the one or more network addresses:
- determining, by the at least one hardware processor, security level information of the respective network address, wherein the determining comprises:
- transmitting an access request to the respective network address, wherein the access request comprises an Internet Control Message Protocol (ICMP) echo request;
- receiving an access response from the respective network address, wherein the access response comprises an ICMP echo reply;
- and
- determining the security level information of the respective network address based on the ICMP echo reply;
- and
- generating, by the at least one hardware processor, a security notification based on the determined security level information for the one or more network addresses, wherein the security notification indicates a security risk of the set of binary software code.
10 more elements
A server, comprising:
- at least one hardware processor;
- and
- one or more computer-readable storage media coupled to the at least one hardware processor and storing programming instructions for execution by the at least one hardware processor, wherein the programming instructions, when executed, cause the at least one hardware processor to perform operations comprising:
- scanning, by the server, a set of binary software code in an executable binary code form to identify one or more network addresses accessed by the set of binary software code, wherein the scanning comprises:
- scanning a byte stream of the set of binary software code to identify binary numbers that correspond to text characters based on a text encoding protocol;
- identifying one or more text strings represented by the binary numbers;
- and
- identifying the one or more network addresses corresponding to the one or more text strings;
- for each of the one or more network addresses:
- determining, by the server, security level information of the respective network address, wherein the determining comprises:
- transmitting an access request to the respective network address, wherein the access request comprises an Internet Control Message Protocol (ICMP) echo request;
- receiving an access response from the respective network address, wherein the access response comprises an ICMP echo reply;
- and
- determining the security level information of the respective network address based on the ICMP echo reply;
- and
- generating, by the server, a security notification based on the determined security level information for the one or more network addresses, wherein the security notification indicates a security risk of the set of binary software code.
13 more elements
One or more non-transitory computer-readable media containing instructions which, when executed, cause a computing device to perform operations comprising:
- scanning, by at least one hardware processor, a set of binary software code in an executable binary code form to identify one or more network addresses accessed by the set of binary software code, wherein the scanning comprises:
- scanning a byte stream of the set of binary software code to identify binary numbers that correspond to text characters based on a text encoding protocol;
- identifying one or more text strings represented by the binary numbers;
- and
- identifying the one or more network addresses corresponding to the one or more text strings;
- for each of the one or more network addresses:
- determining, by the at least one hardware processor, security level information of the respective network address, wherein the determining comprises:
- transmitting an access request to the respective network address, wherein the access request comprises an Internet Control Message Protocol (ICMP) echo request;
- receiving an access response from the respective network address, wherein the access response comprises an ICMP echo reply;
- and
- determining the security level information of the respective network address based on the ICMP echo reply;
- and
- generating, by the at least one hardware processor, a security notification based on the determined security level information for the one or more network addresses, wherein the security notification indicates a security risk of the set of binary software code.
10 more elements
Dependencies are inferred from the claim text.