Dynamic Patching for Diversity-Based Software Security
US-2015379262-A1 · Dec 31, 2015 · US
US2016378453A1 · US · A1
| Field | Value |
|---|---|
| Publication number | US-2016378453-A1 |
| Application number | US-201514753237-A |
| Country | US |
| Kind code | A1 |
| Filing date | Jun 29, 2015 |
| Priority date | Jun 29, 2015 |
| Publication date | Dec 29, 2016 |
| Grant date | — |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
A network device distributes, to multiple user devices, a client application that includes multiple modular code segment files and obtains updated code segment files and dependency information for the client application, the dependency information associating known defects in the client application with one or more of the updated code segment files. The network device receives an error report from one of the multiple user devices, the error report including a particular defect identifier, and determines, based on the dependency information, that an updated code segment file is available to correct an error indicated by the particular defect identifier. The network device retrieves, from a code segment storage location, the updated code segment file and sends the updated code segment file to the one of the multiple user devices.
Opening claim text (preview).
1 . A method, comprising: distributing, to multiple user devices, a client application that includes multiple modular code segment files, wherein each code segment file includes multiple discrete logical functions; obtaining, by a network device, updated code segment files and a dependencies matrix for the client application, wherein the updated code segment files include defect identifiers, and wherein the dependencies matrix associates known defects in the client application with the updated code segment files using the defect identifiers; distributing to the multiple user devices, by the network device and in response to the obtaining, a defect matrix, wherein the defect matrix includes the defect identifiers corresponding to different combinations of discrete logical functions affected by each of the known defects; receiving, by the network device, an error report from one of the multiple user devices, the error report including a particular defect identifier from the defect matrix; determining, by the network device and based on the dependencies matrix, that a particular combination of updated code segment files of the updated code segment files is available to correct an error indicated by the particular defect identifier; retrieving, by the network device and from a code segment storage location, the particular combination of updated code segment files, wherein the particular combination of updated code segment files are configured to be installed on a user device to resolve the error indicated by the particular defect identifier; file; and sending, by the network device, the particular combination of updated code segment files to the one of the multiple user devices; logging, by the network device and based on the sending, the particular defect identifier to update an incident count for the particular defect identifier, wherein the incident count tracks a number of downloads of the particular combination of updated code segment files; comparing, by the network device, the incident count to an incident threshold for the particular defect identifier; and pushing, to the multiple user devices, the particular combination of updated code segment files when the incident count exceeds the incident threshold for the particular defect identifier. 2 . The method of claim 1 , wherein the incident threshold indicates a portion of a total number of devices with the client application. 3 . The method of claim 1 , wherein the incident threshold for the particular defect identifier is different than another incident threshold for a different defect identifier for the client application. 4 . The method of claim 1 , wherein the incident threshold for the particular defect identifier represents a percentage of the number of the multiple user devices. 5 . The method of claim 1 , wherein the error report further includes a particular code segment file name associated with the particular defect identifier. 6 . The method of claim 1 , wherein the error report indicates code segments for the client application that relate to a particular operating system. 7 . The method of claim 1 , further comprising: requesting, by the network device and based on the determining, user authorization to download the updated code segment file to the one of the multiple user devices; and receiving, by the network device, the user authorization. 8 . The method of claim 1 , further comprising: receiving, by the one of the multiple user devices, the updated code segment file; and replacing, by the one of the multiple user devices, a particular code segment file, associated with the particular defect identifier, with the updated code segment file. 9 . The method of claim 1 , further comprising: restarting, by the one of the multiple user devices, the client application with the updated code segment file. 10 . A device, comprising: a network interface to communicate with one or more remote systems; one or more memories to store instructions; and one or more processors configured to execute instructions in the one or more memories to: distribute, to multiple user devices, a client application that includes multiple modular code segment files, wherein each code segment file includes multiple discrete logical functions; receive updated code segment files and dependency information for the client application, wherein the updated code segment files include defect identifiers, and wherein the dependency information associates known defects in the client application with the updated code segment files using the defect identifiers; distribute to the multiple user devices, in response to the obtaining, a defect matrix, wherein the defect matrix includes the defect identifiers corresponding to different combinations of discrete logical functions affected by each of the known defects; receive an error report from one of the multiple user devices, the error report including a particular defect identifier from the defect matrix; determine, based on the dependency information, that a particular combination of updated code segment files of the updated code segment files is available to correct an error indicated by the particular defect identifier; retrieve, from a code segment storage location, the particular combination of updated code segment files, wherein the particular combination of updated code segment files are configured to be installed on a user device to resolve the error indicated by the particular defect identifier; send the particular combination of updated code segment files to the one of the multiple user devices; log, based on the sending, the particular defect identifier to update an incident count for the particular defect identifier, wherein the incident count tracks a number of downloads of the particular combination of updated code segment files; compare the incident count to an incident threshold for the particular defect identifier; and push, to the multiple user devices, the particular combination of updated code segment files when the incident count exceeds the incident threshold for the particular defect identifier. 11 . The device of claim 10 , wherein the incident threshold includes a portion of a total number of devices with the client application. 12 . The device of claim 10 , wherein the incident threshold for the particular defect identifier is different than another incident threshold for a different defect identifier for the client application. 13 . The device of claim 10 , wherein the incident threshold for the particular defect identifier represents a percentage of the number of the multiple user devices. 14 . The device of claim 10 , wherein the error report further includes a particular code segment file name associated with the particular defect identifier. 15 . The device of claim 10 , wherein the error report indicates code file segments for the client application that relate to a particular operating system. 16 . The device of claim 10 , wherein the one or more processors are further configured to execute instructions in the one or more memories to: request, based on the determining, user authorization to download the particular combination of updated code segment files to the one of the multiple user devices; and receive the user authorization. 17 . A non-transitory computer-readable medium including instructions, to be executed by a processor, for causing the processor to: distribute, to multiple user devices, a client application that includes multiple modular code segment files, wherein each code segment file includes multi
for test execution, e.g. scheduling of test suites · CPC title
Installation · CPC title
Updates (security arrangements therefor G06F21/57) · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.