Software policy engine in virtual environment
AssigneeRaytheon Company
InventorsFrederick K. Jones, Uzma Nishat, Geoffrey G. Moyer, Stephen L. Watters, Jeffrey M. Vernon, Alex Dely
Life of this patent
Estimating the term…
Loading patent…
AssigneeRaytheon Company
InventorsFrederick K. Jones, Uzma Nishat, Geoffrey G. Moyer, Stephen L. Watters, Jeffrey M. Vernon, Alex Dely
Estimating the term…
Methods, systems, and computer-readable mediums for detection of policy violations in an unmodified binary in a virtual environment include receiving the unmodified binary in an executable and linkable format (ELF). The unmodified binary is executed, via an emulator, within the virtual environment. The executing includes determining, by an instruction set emulator, a symbol that is referenced during the executing of the unmodified binary. The symbol, a current state, and a global state is sent to a software policy engine. The software policy engine determines an assertion associated with the symbol. The assertion verifies a policy is enforced. A previous state is updated based on the symbol. The assertion is executed based on the current state, the previous state, and the global state. The assertion is determined to have failed based on the executing the assertion. A warning is logged indicating the failed assertion.
Non-transitory machine-readable mediums including instructions that, when executed by processing circuitry of a machine, configure the processing circuitry for detection of policy violations in an unmodified binary in a virtual environment, the processing circuitry configured to perform operations comprising:
A method for detection of policy violations in an unmodified binary in a virtual environment, the method comprising:
A system for detection of policy violations in an unmodified binary in a virtual environment, the system comprising:
Dependencies are inferred from the claim text.