US 11,966,504 B2
Security component for devices on an enumerated bus
Aaron LeMasters, New York, NY (US); and Ion-Alexandru Ionescu, Seattle, WA (US)
Assigned to CROWDSTRIKE, INC., Sunnyvale, CA (US)
Filed by CrowdStrike, Inc., Sunnyvale, CA (US)
Filed on Sep. 3, 2021, as Appl. No. 17/466,861.
Application 17/466,861 is a continuation of application No. 15/873,670, filed on Jan. 17, 2018, granted, now 11,113,425.
Prior Publication US 2021/0397750 A1, Dec. 23, 2021
Int. Cl. G06F 21/82 (2013.01); G06F 9/4401 (2018.01); G06F 13/38 (2006.01); G06F 13/40 (2006.01); G06F 21/55 (2013.01); G06F 21/56 (2013.01); G06F 21/57 (2013.01); G06F 21/71 (2013.01); G06F 21/85 (2013.01); G06F 13/20 (2006.01)
CPC G06F 21/82 (2013.01) [G06F 9/4415 (2013.01); G06F 13/385 (2013.01); G06F 13/387 (2013.01); G06F 13/4063 (2013.01); G06F 21/554 (2013.01); G06F 21/56 (2013.01); G06F 21/572 (2013.01); G06F 21/71 (2013.01); G06F 21/85 (2013.01); G06F 13/20 (2013.01); G06F 2221/2141 (2013.01)] 23 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, by a plug-and-play (PnP) driver implemented on a computing device, a message listing at least one enumerated bus device that is connected to the computing device;
determining, by the PnP driver, whether the at least one enumerated bus device belongs to a device class; and
based at least in part on the determining, attaching the PnP driver as an upper-device filter or a lower-device filter in a device stack associated with the at least one enumerated bus device, wherein the device class includes at least one of hubs or controllers, and the attaching comprises attaching as an upper-device filter if the at least one enumerated bus device is a hub or a controller and attaching as a lower-device filter if it is not.