Back to results
US 2021/0334359 A1Published application
Mobile device policy enforcement
AssigneeSophos Limited
InventorMichael Shannon
Life of this patent
Estimating the term…
Abstract
In general, in one aspect, a method includes receiving software code with an invalid characteristic, repeatedly attempting to execute the software code with the invalid characteristic on a device, and in response to successful execution of the software code with the invalid characteristic, taking an action. The action may include an action to remediate the device.
Claims20
A non-transitory computer-readable medium comprising instructions, the instructions when executed causing one or more processors to:
- execute a local security agent on a device of an enterprise network, the local security agent enforcing a security policy requiring an operating system of the device to check that software code has a valid signature before permitting execution of the software code;
- attempt to execute the software code with an invalid signature on the device, the invalid signature preventing execution of the software code on the device if the operating system meets the security policy;
- upon unsuccessful execution of the software code with the invalid signature on the device, repeat the attempt to execute the software code with the invalid signature on the device until a given attempt successfully executes the software code with the invalid signature on the device, wherein repeating the attempt to execute the software code includes waiting a predetermined time interval between each attempt;
- and
- in response to successful execution of the software code with the invalid signature, take an action to remediate the device.
2 more elements
A method, comprising:
- executing a local security agent on a compute instance of an enterprise network, the local security agent enforcing a security policy requiring an operating system of the compute instance to check that software code has a valid signature before permitting execution of the software code;
- repeatedly attempting to execute the software code with an invalid signature on the compute instance until one of the repeated attempts to execute the software code on the compute is successful, wherein repeatedly attempting to execute the software code includes waiting a predetermined time interval between each attempt, the compute instance having the security policy, the invalid signature preventing execution of the software code with the invalid signature if the operating system meets the security policy;
- and
- in response to successfully executing the software code with the invalid signature, causing a remedial action to be taken by the compute instance.
1 more element
A system, comprising:
- one or more processors;
- a non-transitory computer-readable medium comprising instructions, the instructions when executed causing the one or more processors to perform operations, comprising:
- execute a local security agent on a compute instance of an enterprise network, the local security agent enforcing a security policy requiring an operating system of the compute instance to check that software code has a valid signature before permitting execution of the software code;
- receive the software code with an invalid signature;
- repeatedly attempt to execute the software code with the invalid signature on the compute instance until one of the repeated attempts to execute the software code with the invalid signature is successful, wherein repeatedly attempting to execute the software code includes waiting a predetermined time interval between each attempt, wherein the invalid signature causes the compute instance to prevent execution of the software code with the invalid signature if the operating system meets the security policy;
- and
- in response to successfully executing the software code with the invalid signature, taking an action to remediate the compute instance.
4 more elements
Dependencies are inferred from the claim text.