9 results about "Software integrity" patented technology

Discussed herein are devices, systems, machine-readable media, and methods for assessing a software build for a vulnerability, generating release recommendations, and implementing a remedial action to mitigate security risks. A method includes receiving a Software Bill of Materials (SBOM) that lists one or more libraries used in a software build, receiving a user-specified administration policy, generating an over overall provenance bundle from a metadata of the one or more libraries used in the software build, implementing a gradient boosted tree algorithm using both the overall provenance bundle and the user-specified administration policy to generate a software releasability recommendation, receiving the software releasability recommendation into a Large Language Model (LLM) to generate a recommendation report detailing one or more software vulnerabilities, and implementing the software releasability recommendation by releasing the software build or blocking the release of the software build based on the software releasability recommendation.

The invention provides a software integrity architecture optimization method and system, a storage medium and a program product, and relates to the field of software design. The method comprises the following steps: analyzing the worst execution time of task execution of a predetermined partition in a software running process, and evaluating whether the task execution time has an overtime condition under the worst condition; in the presence of timeout, grouping data channels in the task to obtain a plurality of data channel groups; according to the priority of each data channel group, preset processing operation is carried out on each data channel group in sequence, and in the next task period, the output state of the data channel group which is not executed completely in the current task period is returned to the expired output state generated or kept in the previous task period. The method and the device can eliminate or alleviate adverse effects possibly brought by timed task timeout, and enhance the fault-tolerant capability of the system for the task timeout.

Embodiments of the invention relate to a method for integrity check of a software by using a randomized version of the software. In this respect, an attestation service (100) transmits an attestation token (520) to a verification service (300), the attestation token (520) comprising: a first integrity value (VI) for a software, a random seed, and a randomization generator function. The verification service (300) determines a second integrity value (V2) for the software (710) based on a randomized software (710') which is obtained based on the random seed put into the randomization generator function. Based on the first integrity value (VI) and the second integrity value (V2) an appraisal of the software (710) is determined which is sent to the attestation service (100) in an integrity report (530). Furthermore, embodiments of the invention also relate to an attestation service (100) and a verification service (300).

The invention discloses a design method for ensuring the integrity of satellite system software based on DO-278A. The method comprises the following steps: defining a satellite dedicated software security integrity level SSIL and mapping the satellite dedicated software security integrity level SSIL with a software integrity level SWIL of a DO-278A standard; constructing a satellite-ground cooperative dual V model containing a ground development V model and an on-orbit maintenance V model; designing a space software fault-tolerant architecture and carrying out a fault injection test; and establishing an on-orbit software health state monitoring and evidence collection closed-loop process. According to the method provided by the invention, the full life cycle of the satellite software is covered, the fault-tolerant capability and on-orbit maintainability of the satellite software are improved, the blank of an integrity guarantee scheme of the satellite exclusive software in the prior art is filled, and long-period and high-reliability operation of the satellite software is guaranteed.

A monitoring device for verifying the integrity of a software of a memory device is disclosed. The monitoring device comprises a processor and a memory, the memory containing instructions executable by the processor, such that the processor is to; receive first information on at least one physical side-effect of a computer apparatus as a result of an instruction of a monitored software being executed by the computing apparatus. The processor is also to receive second information on the monitored software being executed, and based on the first information and the second information, the processor is to determine if the monitored software is compromised.

The invention relates to a spin lock software semi-physical simulation test method based on an FPGA (Field Programmable Gate Array), and solves the technical problems that the existing spin lock software test method occupies design time, influences the integrity of tested software or has a galloping risk. The method is applied to simulation debugging and fault testing of spin lock software in a three-self-inertia combination product, an equivalent mathematical model of a spin lock mechanism is achieved through an FPGA, relevant parameters of the mathematical model in the FPGA are modified through external key operation, various data information of a locking motor and a frame motor is simulated, and a simulation testing platform is constructed; the simulation test platform can flexibly inject data and simulate the real state of the spin lock software in a whole machine real object, including a normal working condition and an abnormal working condition, so that the test work of the spin lock software is efficiently and reliably completed.

The application discloses a software integrity verification method and system, which segments software code to be verified to obtain a plurality of code segments, acquires a primary key, generates a secondary key based on the primary key and any code segment, obtains a seed value according to the secondary key, initializes a random number generator using the seed value, obtains the initialized random number generator, obtains a code segment array according to the plurality of code segments, shuffles and reorganizes the code segment array using the initialized random number generator to obtain a reorganized code segment array, calculates using a symmetric encryption algorithm according to the secondary key and the reorganized code segment array to obtain a verification code, compares the verification code with a preset verification code of the software code to obtain an integrity verification result, the secondary key has concealment and is not easy to leak, and when the software code is changed and upgraded, the combination order of the software code verification is also changed, thereby improving the effectiveness and security of the software integrity verification.

The invention discloses a software file integrity protection method and device, equipment and a medium, and relates to the technical field of software integrity protection. The method comprises the following steps: when software is subjected to incremental change every time, performing abstract processing on files associated with the change to obtain corresponding abstract values, and combining the abstract values into an abstract baseline of the change; signature is performed by using a private key, and the signature and the abstract baseline are published along with the change upgrade package; when the integrity of the file in the software needs to be checked, respectively carrying out signature verification on the abstract baselines based on signature data generated by previous incremental changes, and determining a current abstract value of the file; traversing the verified abstract baselines according to any sequence, and searching a target abstract baseline containing file abstract records; and comparing the recorded digest value with the current digest value, and judging whether the integrity verification is successful or not according to the comparison result. Through the technical scheme of the invention, the problems of insufficient signature security in a production environment, overlarge full-quantity signature engineering quantity and the like are solved.