# US 2014/0157421 A1 · Detecting security vulnerabilities on computing devices

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2014/0157421 A1
- Document ID: US20140157421A1
- Status: Published application
- Kind: A1
- Application number: 14/026,347
- Filed: 2013-09-13
- Published: 2014-06-05
- Earliest claimed: 2012-12-05
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: Roee Hay; Daniel Kalman; Roi Saltzman; Omer Tripp
- Web page: https://patentgrep.com/patent/US20140157421A1

## CPC

- G06F 21/577: {Assessing vulnerabilities and evaluating computer system security}
- G06F 21/52: during program execution, e.g. stack integrity {; Preventing unwanted data erasure; Buffer overflow}
- G06F 21/554: {involving event detection and direct action}
- G06F 21/566: {Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities}
- G06F 21/606: {by securing the transmission between two devices or processes}
- G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Identifying security vulnerabilities on computing devices by detecting an inter-process communication on a computing device, determining whether the inter-process communication is consistent with a predefined specification of a security vulnerability, and causing a predefined action to be performed on the computing device responsive to determining that the inter-process communication is consistent with a predefined specification of a security vulnerability.

## Claims

### Claim 1

A method for identifying security vulnerabilities on computing devices, the method comprising:
detecting an inter-process communication on a computing device;
determining whether the inter-process communication is consistent with a predefined specification of a security vulnerability; and
causing a predefined action to be performed on the computing device responsive to determining that the inter-process communication is consistent with a predefined specification of a security vulnerability.

### Claim 2 (depends on 1)

The method according to claim 1 wherein the detecting comprises receiving broadcast-type inter-process communications.

### Claim 3 (depends on 1)

The method according to claim 1 wherein the detecting comprises indicating an ability to receive inter-process communications of a predefined type.

### Claim 4 (depends on 1)

The method according to claim 1 wherein the determining comprises determining where the security vulnerability is a susceptibility to an integrity attack.

### Claim 5 (depends on 1)

The method according to claim 1 wherein the determining comprises determining where the security vulnerability is a susceptibility to a confidentiality violation.

### Claim 6 (depends on 1)

The method according to claim 1 wherein the causing step comprises causing a notification to be provided to a user of the computing device describing the security vulnerability.

### Claim 7 (depends on 1)

The method according to claim 1 wherein the causing step comprises causing an issuer of the inter-process communication to be terminated or quarantined.

### Claim 8 (depends on 1)

The method of claim 1 wherein the detecting, communication and causing are embodied in and implemented by any of
a) computer hardware, and
b) computer software embodied in a non-transitory, computer-readable medium.

### Claim at position 9

9-23. (canceled)