Title:
システム呼び出しのシーケンスを用いた異常検出
Document Type and Number:
Japanese Patent JP6968145
Kind Code:
B2
Abstract:
Systems and methods of detecting a call sequence anomaly in a message-based operating system are provided. A message may be received that indicates a programmatic procedure of an operating system was invoked. The message may include a programmatic procedure identifier, a sender process identifier, and a receiver process identifier. An invocation hash may be generated based on the message. The invocation hash may be translated to a smaller invocation identifier. The invocation identifier may be included in a translated call sequence that comprises invocation identifiers for a series of invocations. Depending on whether the translated call sequence is included in previously generated predetermined call sequences, the translated call sequence may be determined as an anomaly or not an anomaly.
Inventors:
Al Shah Nobby, Mohamed
Application Number:
JP2019502667A
Publication Date:
November 17, 2021
Filing Date:
July 19, 2017
Export Citation:
Assignee:
BlackBerry Limited
International Classes:
G06F21/52; G06F9/54; G06F11/28
Domestic Patent References:
| JP2009031859A | ||||
| JP2011258019A | ||||
| JP2009259160A | ||||
| JP5933797B2 |
Foreign References:
| US7900194 |
Attorney, Agent or Firm:
Takeshi Oshio
Previous Patent: Drug delivery device with regulator
Next Patent: Catheter sheath that radiates liquid laser-induced pressure waves
Next Patent: Catheter sheath that radiates liquid laser-induced pressure waves