A small piece of hardware connects to a mobile device and filters out attacks and malicious code. Using the piece of hardware, a mobile device can be protected by greater security and possibly by the same level of security offered by its associated corporation/enterprise. In one embodiment, a mobile security system includes a connection mechanism for connecting to a data port of a mobile device and for communicating with the mobile device; a network connection module for acting as a gateway to a network; a security policy for determining whether to forward content intended for the mobile device to the mobile device; and a security engine for executing the security policy.

System and method for providing network security to mobile devices

Method and system for improving the security of storing digital data in a memory or its delivery as a message over the Internet from a sender to a receiver using one or more hops is disclosed. The message is split at the sender into multiple overlapping or non-overlapping slices according to a slicing scheme, and the slices are encapsulated in packets each destined to a different relay server as an intermediate node according to a delivery scheme. The relay servers relay the received slices to another other relay server or to the receiver. Upon receiving all the packets containing all the slices, the receiver combines the slices reversing the slicing scheme, whereby reconstructing the message sent.

System and method for routing-based internet security

A non-volatile storage system is provided with reduced delays associated with loading and updating a logical-to-physical mapping table from non-volatile memory. The mapping table is stored in a plurality of segments, so that each segment can be loaded individually. The segmented mapping table allows memory access to logical addresses associated with the loaded segment when the segment is loaded, rather than delaying accesses until the entire mapping table is loaded. When loading mapping segments, segments can be loaded according to whether there is a pending command or by an order according to various algorithms.

Solid-state drive with reduced power up time

A method, system, and computer program product for associating events. A provided event dataset includes events occurring in each of N successive time intervals (N≧3). Association rules pertaining to successive events in the event dataset are deduced. Sequences of events are generated from the association rules. Clusters of the sequences of events are formed. Sequences of the clusters are created. The clusters of the sequences may be used: to identify at least one event occurring in a time interval of the N time intervals as being a probable cause of at least one event occurring in a later-occurring time interval of the N time intervals; or to predict an occurrence of at least one event in a time interval occurring after the N time intervals, wherein the at least one event had occurred within the N time intervals.

Method and system for associating events

A computer performs dynamic address isolation. The computer comprises an application associated with an application address, a network interface coupled to receive incoming data packets from and transmit outgoing data packets to an external network, a network address translation engine configured to translate between the application address and a public address, and a driver for automatically forwarding the outgoing data packets to the network address translation engine to translate the application address to the public address, and for automatically forwarding the incoming data packets to the network address translation engine to translate the public address to the application address. The computer may communicate with a firewall configured to handle both network-level security and application-level security.

System And Method For Providing Network And Computer Firewall Protection With Dynamic Address Isolation To A Device

The various embodiments described below are directed to providing authenticated and confidential messaging from software executing on a host (e.g. a secure software application or security kernel) to and from I/O devices operating on a USB bus. The embodiments can protect against attacks that are levied by software executing on a host computer. In some embodiments, a secure functional component or module is provided and can use encryption techniques to provide protection against observation and manipulation of USB data. In other embodiments, USB data can be protected through techniques that do not utilized (or are not required to utilize) encryption techniques. In accordance with these embodiments, USB devices can be designated as “secure” and, hence, data sent over the USB to and from such designated devices can be provided into protected memory. Memory indirection techniques can be utilized to ensure that data to and from secure devices is protected.

Methods and systems for protecting data in USB systems

Port number emulation for wireless Universal Serial Bus (USB) connections is provided. Virtual USB port numbers are emulated and associated with external devices that are wirelessly connected to a host device. The associations are maintained in a data structure. When a wireless external device connects with the host device after a period of disconnection, the emulated port number associated with the wireless external device is identified. The virtual port number is provided to a software component in the host device so that the external device can resume interaction with software components in the host device across enumerations. In one example implementation, the virtual USB port numbers are provided to a plug and play manager, which handles the wireless USB devices in a manner similar to wired USB devices.

Port number emulation for wireless usb connections

In wireless USB data transfers over UWB, software configures hardware thresholds to control data transfer in a manner that uses bandwidth for good connections over bad connections, given the high error rate experienced with wireless USB. Periodic transfers are first attempted before asynchronous transfers, as long as the periodic transfers are successful. When failures are occurring, the hardware includes a mechanism having a software-configurable threshold specifying the number of errors a given endpoint can tolerate before it is paused in the schedule. By pausing transfer attempts that are likely to again fail, endpoints with successful transfers are favored over those experiencing errors. When the number of active transfers pending exceeds a software-configurable notification threshold for isochronous endpoints, the hardware notifies the software of this state, corresponding to a low-buffer condition at the receiver. The software may then reconfigure thresholds and deactivate other transfers to force data transfers into the buffer.

Wireless USB hardware scheduling

An extensible architecture for untrusted medium (e.g., wireless) device configuration via trusted medium. The architecture includes systems and methods for establishing a wireless universal serial bus (WUSB) connection between a connecting device (2112) and a host device (2100) using a trusted medium, such as a wired connection (2105). In one implementation, the connecting device (2112) sends an association request through the trusted medium to the host device (2100). The association request includes device attributes associated with the WUSB component (2103) of the connecting device (2112). In response, the host device (2100) parses and validates the association request and determines connection attributes for connecting using WUSB. The host device (2100) sends a response with the connection attributes through the trusted medium (2105) to the connecting device (2112). Using the connection attributes, the connecting device (2112) configures the WUSB component (2103) and establishes a WUSB connection with the host device.

Establishing wireless universal serial bus (wusb) connection via a trusted medium

Systems and methods for analyzing transactions on a bus. A software module can cause a trace packet to be generated and sent out on a bus to an invalid address. The trace packet triggers a protocol analyzer and permits the bus data flowing on the bus when the software module detected a problem to be analyzed. The trace packet causes the protocol analyzer to trigger even though the bus protocol is normal and the protocol analyzer would not otherwise trigger. The trace packet can be used to analyze and debug communications flowing on a bus when the software module detects a problem.

Glen T. Slick

Papers

Methods and systems for protecting data in USB systems

Port number emulation for wireless usb connections

Wireless USB hardware scheduling

Establishing wireless universal serial bus (wusb) connection via a trusted medium

Systems and methods for analyzing bus data