Method and system for preventing and detecting security threats
AssigneeIrdeto Canada Corporation
InventorRon Vandergeest
Life of this patent
Estimating the term…
Abstract
A system and method is provided for implementing platform security on a consumer electronic device having an open development platform. The device is of the type which includes an abstraction layer operable between device hardware and application software. A secured software agent is provided for embedding within the abstraction layer forming the operating system. The secured software agent is configured to limit access to the abstraction layer by either blocking loadable kernel modules from loading, blocking writing to the system call table or blocking requests to attach debug utilities to certified applications or kernel components.
Claims35
A system for preventing security threats, the system comprising:
- at least one processor;
- and
- one or more memory devices operatively coupled to the at least one processor;
- an abstraction layer stored in at least one of the one or more memory devices, the abstraction layer operable between the device hardware and application software;
- and
- a secured software agent embedded within the abstraction layer, the secured software agent configured to limit access to the abstraction layer.
A method preventing security threats on a device having at least one processor, the device having an abstraction layer operable between device hardware and application software, the method comprising:
- embedding a secured software agent within said abstraction layer;
- and
- the at least one processor limiting access to the abstraction layer through the secured software agent.
A non-transient computer readable medium for preventing security threats to device hardware, the medium comprising:
- an abstraction layer operable between the device hardware and application software used on the device hardware;
- and
- a secured software agent embedded within the abstraction layer, the secured software agent configured to limit access to the abstraction layer.
Dependencies are inferred from the claim text.