US 12,088,629 B2
Securing network devices against network vulnerabilities
Aleksandr Ŝevĉenko, Vilnius (LT); and Justas Rafanaviĉius, Vilniaus (LT)
Assigned to UAB 360 IT, Vilnius (LT)
Filed by UAB 360 IT, Vilnius (LT)
Filed on Aug. 9, 2022, as Appl. No. 17/883,599.
Application 17/883,599 is a continuation of application No. 17/882,589, filed on Aug. 7, 2022, granted, now 11,792,233.
Prior Publication US 2024/0048583 A1, Feb. 8, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/20 (2013.01) [H04L 63/1433 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method, comprising:
transmitting, by a network device to a security device, an initial security machine code instruction set including a plurality of initial security machine code instructions to be executed by an operating system associated with the security device;
transmitting, by the network device to the security device based at least in part on transmitting the initial security machine code instruction set, an event signal identifying a network-facing operation that is to be carried out by the security device over a network;
transmitting, by the security device to the network device based at least in part on receiving the event signal, a security machine code instruction associated with the security device carrying out the network-facing operation, the security machine code instruction being selected from among the plurality of initial security machine code instructions based at least in part on the network-facing operation;
translating, by the network device, the security machine code instruction into a host machine code instruction to be executed by an operating system associated with the network device;
receiving, by the security device from the network device based at least in part on transmitting the security machine code instruction, communication information to carry out the network-facing operation;
determining, by the network device after the security device carries out the network-facing operation, a new security machine code instruction set including a plurality of new security machine code instructions associated with operation of the security device;
transmitting, by the network device to the security device, the new security instruction set to the security device; and
periodically receiving, by the security device from the network device, an additional new security machine code instruction set associated with operation of the security device, the additional new security machine code instruction set being determined based at least in part on modifying one or more previous security machine code instruction sets, wherein
the initial security machine code instruction set is determined using a first set of alphanumeric characters and the new security machine code instruction set is determined using a second set of alphanumeric characters, the first set being different from the second set.