Method and system for preventing and detecting security threats
AssigneeIrdeto B.V.
InventorRon Vandergeest
Life of this patent
Estimating the term…
Abstract
A system and method is provided for implementing platform security on a consumer electronic device having an open development platform. The device is of the type which includes an abstraction layer operable between device hardware and application software. A secured software agent is provided for embedding within the abstraction layer forming the operating system. The secured software agent is configured to limit access to the abstraction layer by either blocking loadable kernel modules from loading, blocking writing to the system call table or blocking requests to attach debug utilities to certified applications or kernel components.
Claims10
An apparatus for increasing security of a computing device, that apparatus comprising:
- at least one processor;
- at least one non-transitory memory device storing instructions thereon which, when executed by the at least one processor, cause the at least one processor to:
- embed a first secured software agent within an OS kernel of the device, wherein the first secured software agent is one of plural secured software agents generated by diverse code portion combinations to thereby have the same functionality but be structurally and semantically different, and wherein the secured software agent is configured to limit access to the OS kernel to provide protection of applications and resources.
A secured software agents embedded within an OS kernel of the device for increasing security of a computing device, the secured software agent comprising code for causing the computing device to:
- limit access to the OS kernel to provide protection of applications and resources;
- and
- wherein the secured software agent is one of multiple other secure software agents created from diverse code portion combinations to thereby have the same functionality but be structurally and semantically different from each other.
Dependencies are inferred from the claim text.