Microsoft technology licensing, llc (20240338185). AUTOMATIC RUNTIME EXECUTION HARDENING THROUGH STATIC SYSTEM APPLICATION PROGRAMMING INTERFACE (API) DATA MAPPING simplified abstract
AUTOMATIC RUNTIME EXECUTION HARDENING THROUGH STATIC SYSTEM APPLICATION PROGRAMMING INTERFACE (API) DATA MAPPING
Organization Name
microsoft technology licensing, llc
Inventor(s)
Yair Netzer of Ganei Tlkvah (IL)
AUTOMATIC RUNTIME EXECUTION HARDENING THROUGH STATIC SYSTEM APPLICATION PROGRAMMING INTERFACE (API) DATA MAPPING - A simplified explanation of the abstract
This abstract first appeared for US patent application 20240338185 titled 'AUTOMATIC RUNTIME EXECUTION HARDENING THROUGH STATIC SYSTEM APPLICATION PROGRAMMING INTERFACE (API) DATA MAPPING
Simplified Explanation: The patent application describes systems and methods for automatically enhancing the security of software programs during development by generating enforcement profiles based on system API usage data.
- Analyzing software artifacts, including machine code, without executing the program
- Generating platform-specific enforcement profiles for secure mode hardening
- Defining allowed actions for the software program while blocking unauthorized actions
Key Features and Innovation: - Automatic enforcement profile generation for software security - Static analysis of software artifacts to create platform-specific profiles - Enhancing software program security during development
Potential Applications: - Software development companies - Cybersecurity firms - Government agencies
Problems Solved: - Enhancing software security during development - Preventing unauthorized actions by software programs - Improving overall system security
Benefits: - Increased security for software programs - Reduced risk of cyber attacks - Enhanced protection of sensitive data
Commercial Applications: Automatic Runtime Execution Hardening for Software Programs
Prior Art: Prior art related to automatic runtime execution hardening and software security measures can be found in academic research papers, cybersecurity patents, and industry publications.
Frequently Updated Research: Stay updated on the latest advancements in software security, static analysis techniques, and system API usage data analysis to enhance the effectiveness of automatic runtime execution hardening.
Questions about Automatic Runtime Execution Hardening for Software Programs: 1. How does automatic enforcement profile generation improve software security during development? 2. What are the potential implications of platform-specific enforcement profiles for secure mode hardening in real-world applications?
Original Abstract Submitted
systems and methods are provided for implementing automatic runtime execution hardening for software programs undergoing software development. in various embodiments, a computing system performs automatic enforcement profile generation within a software development environment in which source code of a software program is compiled or translated to create an executable software program. automatic enforcement profile generation includes accessing, from a data storage device, an artifact associated with the software program, statically analyzing the artifact (including machine code) associated with the software program without executing the software program, and generating system api usage data based on the analysis. a platform-specific enforcement profile for a secure mode hardening feature is created based on the system api usage data and platform configuration data. when applied to the software program, the platform-specific enforcement profile defines actions (including system calls) that the software program is allowed to perform, while blocking other actions (including other system calls).
