Patent · US Expired

Mechanism for evaluating security risks

US8156558B2 · kind B2 · utility

42Cited by
22References
19Claims
0Family size

Assignee

Inventors

Key dates

Filing dateMay 17, 2003
Grant dateApr 10, 2012
Priority date
Expiry dateMay 7, 2026

Classification

  • Technology area (CPC G)Physics
  • CPC primaryG06F21/566
  • WIPO fieldComputer technology
  • WIPO sectorElectrical engineering

Abstract

Described is a mechanism for collectively evaluating security risks associated with loading an application. A hosting environment associated with loading the application invokes a trust manager to evaluate the security risks. The trust manager invokes a plurality of trust evaluators, where each trust evaluator is responsible for analyzing and assessing a different security risk. Upon completion of each security risk evaluation, results of those individual security risk evaluations are returned to the trust manager. The trust manager aggregates the variety of security risk evaluation results and makes a security determination based on the aggregated evaluation results. That determination may be to move forward with loading the application, to block the load of the application, or perhaps to prompt the user for a decision about whether to move forward with the load.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.