Automated platform to assess commercial off the shelf (COTS) software assurance
| DWPI Title: Method for verifying software, involves creating number of virtual machines that simulate number of computing environments, by number of processors, and number of software programs is run by number of processors on virtual machines |
| Abstract: A computer-implemented method of verifying software is provided. The method comprises creating a number of virtual machines that simulate computing environments and running a number of software program on the virtual machines. The software programs have full access to the simulated computing environments, but the source code of the software program is unavailable. A hypervisor performs virtual machine introspection as the software programs run on the virtual machines, wherein the virtual machines and software programs are unaware the virtual machine introspection is being performed. Telemetry data is collected about the software programs, including any identified threats posed by the software programs to the simulated computing environments, and presented to a user via an interface. |
| Use: Method for verifying software. |
| Advantage: Deep packet inspection inspects data packets sent over a computer network to ensure they are in the correct format, and to check for malicious code and other illicit activity. |
| Novelty: The method involves creating (502) a number of virtual machines that simulate a number of computing environments, by a number of processors. A number of software programs is run (504) by a number of processors on the virtual machines. The virtual machine introspection using a hypervisor is performed (506) by a number of processors as the software programs run on the virtual machines. The telemetry data is collected (508), about the software programs having any identified threats posed by the software programs to the simulated computing environments by a number of processors. The telemetry data is presented (518) by a number of processors. |
| Filed: 6/16/2020 |
| Application Number: US16902341A |
| Tech ID: SD 14921.1 |
| This invention was made with Government support under Contract No. DE-NA0003525 awarded by the United States Department of Energy/National Nuclear Security Administration. The Government has certain rights in the invention. |
| Data from Derwent World Patents Index, provided by Clarivate All rights reserved. Republication or redistribution of Clarivate content, including by framing or similar means, is prohibited without the prior written consent of Clarivate. Clarivate and its logo, as well as all other trademarks used herein are trademarks of their respective owners and used under license. |