Source: https://patents.google.com/patent/US8453245B2/en
Timestamp: 2018-04-21 23:20:39
Document Index: 668490566

Matched Legal Cases: ['Application No. 07870139', 'Application No. 2007341952', 'Application No. 200780048625', 'Application No. 200780048625', 'Application No. 200780048625', 'Application No. 200780048625', 'Application No. 2009', 'Application No. 2009']

US8453245B2 - Automatic vulnerability detection and response - Google Patents
US8453245B2
US8453245B2 US11618470 US61847006A US8453245B2 US 8453245 B2 US8453245 B2 US 8453245B2 US 11618470 US11618470 US 11618470 US 61847006 A US61847006 A US 61847006A US 8453245 B2 US8453245 B2 US 8453245B2
US20080163374A1 (en )
detecting on a computing device a local program crash, wherein said detecting is done by a component residing outside of the program;
responsive to said detecting, disabling a function or interface of the local program that was a subject of the program crash by building and applying a shield that provides an automatic, runtime solution to disable the function or interface as the program continues to operate;
informing the local program that the function or interface has been disabled by the shield;
notifying a user that the function or interface has been disabled by the shield; and
providing the user, via a user interface, with an option to re-enable the function or interface that has been disabled by the shield.
3. The method of claim 1, wherein the acts of building and applying are performed by using a vulnerability/mitigation table which associates vulnerabilities and mitigation functions.
4. The method of claim 1, wherein said acts of detecting and disabling are performed by a web browser.
5. One or more computer-readable storage media devices having computer readable instructions thereon, comprising:
instructions for detecting on a computing device a local program crash, wherein said detecting is done by a component residing outside of the program;
responsive to said instructions for detecting, instructions for disabling a function or interface of the local program that was a subject of the program crash by building and applying a shield that provides an automatic, runtime solution to disable the function or interface as the program continues to operate;
instructions for informing the local program that the function or interface has been disabled by the shield;
instructions for notifying a user that the function or interface has been disabled the shield; and
instructions for providing the user, via a user interface, with an option to re-enable the function or interface that has been disabled by the shield.
6. A computing system having a processor and a memory implementing the steps of:
notifying a user that the function or interface has been disabled the shield; and
reporting the local program crash;
responsive to said reporting, receiving and applying a shield as an automatic, runtime solution effective to disable a function or interface of the local program that was a subject of the program crash and allow the local program to continue operating;
8. The method of claim 7, wherein the act of applying is performed by using a vulnerability/mitigation table which associates vulnerabilities and mitigation functions.
9. The method of claim 7 further comprising responsive to said detecting, inspecting a crash log to ascertain the function or interface associated with the program crash.
10. The method of claim 7, wherein said acts of detecting, querying, reporting, receiving and applying are performed by a web browser.
11. One or more computer-readable storage media devices having computer readable instructions thereon, comprising:
responsive to said instructions for detecting, instructions for querying a user to ascertain whether the program crash can be reported;
instructions for reporting the local program crash;
responsive to said reporting, instructions for receiving and applying a shield as an automatic, runtime solution effective to disable a function or interface of the local program that was a subject of the program crash and allow the local program to continue operating;
12. A computing system having a processor and a memory implementing the steps of:
responsive to said detecting, for querying a user to ascertain whether the program crash can be reported;
notifying a user that the function or interface has been disabled theshield; and
responsive to said reporting, downloading one or more shields configured to disable a function or interface of the local program associated with the crash to provide an automatic, runtime solution;
if user approval is not granted, disabling the function or interface that was a subject of the program crash;
informing the local program that the function or interface has been disabled; and
providing the user, via a user interface, with an option to re-enable the function or interface that has been disabled.
14. The method of claim 13, wherein the acts of detecting and asking are performed by a web browser.
US20080163374A1 true US20080163374A1 (en) 2008-07-03
US8453245B2 true US8453245B2 (en) 2013-05-28
JPH0433105A (en) 1990-05-30 1992-02-04 Toshiba Corp Program supervisory device for programmable controller
US20040205421A1 (en) 2000-06-23 2004-10-14 Microsoft Corporation Method and system for reporting failures of a program module in a corporate environment
JP2006127422A (en) 2004-11-01 2006-05-18 Ntt Docomo Inc Terminal controller and terminal control method
CN1821975A (en) 2005-02-17 2006-08-23 微软公司 Systems and methods for shielding an identified vulnerability
JP2006228206A (en) 2005-02-17 2006-08-31 Microsoft Corp System and method for shielding identified vulnerability
"Extended European Search Report", European Patent Application No. 07870139.8, (Jul. 20, 2012), 6 pages.
"Foreign Office Action", Australian Application No. 2007341952, (Jun. 24, 2011), 2 pages.
"Foreign Office Action", Chinese Application No. 200780048625.3, (Apr. 12, 2012),6 pages.
"Foreign Office Action", Chinese Application No. 200780048625.3, (Jul. 6, 2011), 8 pages.
"Foreign Office Action", Chinese Application No. 200780048625.3, (Nov. 24, 2010),13 pages.
"Foreign Office Action", Chinese Application No. 200780048625.3, (Oct. 31, 2012), 9 pages.
"Foreign Office Action", Japanese Application No. 2009-544323, (Feb. 10, 2012), 6 pages.
"Foreign Office Action", Japanese Application No. 2009-544323, (Jul. 13, 2012), 4 pages.
International Search Report for International Application No. PCT/US2007/089221 Mailed on Jun. 2, 2008, pp. 12.
US20080163374A1 (en) 2008-07-03 application