Computing platform security methods and apparatus
View Patent ↗Computing platform security methods and apparatus are disclosed. An example apparatus includes a security application to configure a security task, the security task to detect a malicious element on a computing platform, the computing platform including a central processing unit and a graphics processing unit; and an offloader to determine whether the central processing unit or the graphics processing unit is to execute the security task; and when the graphics processing unit is to execute the security task, offload the security task to the graphics processing unit for execution.
1. An apparatus to initiate a security action, the apparatus comprising:
a dispatcher to receive a task to be executed on a graphics processing unit from a consumer of the graphics processing unit;
a notifier to provide status information associated with the task to the consumer of the graphics processing unit, wherein the status information includes an indication of whether the task is preempted; and
a trigger event analyzer to initiate the security action by the consumer based on the indication, wherein the security action by the consumer includes at least one of a memory scan of a process that preempted the task or a restriction of the process that preempted the task, at least one of the dispatcher, the notifier, or the trigger event analyzer including a logic circuit.
2. The apparatus as defined in claim 1 , wherein the notifier is to provide the status information to the consumer of the graphics processing unit at a privilege level associated with trusted components.
3. The apparatus as defined in claim 1 , further including a scheduler to obtain the status information and to obtain a change in the status information.
4. The apparatus as defined in claim 1 , wherein the status information provided by the notifier includes an identifier of the process that preempted the task.
5. The apparatus as defined in claim 4 , further including a security application to receive the status information and to use the status information to evaluate the process that preempted the task.
6. The apparatus as defined in claim 1 , wherein the consumer is a security application and the task is a malware detection scan associated with the security application.
7. The apparatus as defined in claim 1 , wherein the notifier is to receive, from the consumer of the graphics processing unit, a request for a notification of a particular aspect of the status information.
8. A method to initiate a security action, the method comprising:
receiving, with an instruction executed by a processor, a task to be executed on a graphics processing unit from a consumer of the graphics processing unit;
conveying, by executing an instruction with the processor, status information associated with the task to the consumer of the graphics processing unit, wherein the status information includes an indication of whether the task is preempted; and
initiating, by executing an instruction with the processor, the security action by the consumer based on the indication, wherein the security action by the consumer includes at least one of a memory scan of a process that preempted the task or a restriction of the process that preempted the task.
9. The method as defined in claim 8 , wherein conveying the status information to the consumer of the graphics processing unit includes conveying the status information at a privilege level associated with trusted components.
10. The method as defined in claim 8 , further including obtaining the status information and obtaining a change in the status information.
11. The method as defined in claim 8 , wherein the status information includes an identifier of the process that preempted the task.
12. The method as defined in claim 11 , further including using the status information to evaluate the process that preempted the task.
13. The method as defined in claim 8 , wherein the consumer is a security application and the task is a malware detection scan associated with the security application.
14. The method as defined in claim 8 , further including receiving, from the consumer of the graphics processing unit, a request for a notification of a particular aspect of the status information.
15. A tangible machine readable storage medium comprising instructions to initiate a security action that, when executed, cause a machine to, at least:
obtain a task to be executed on a graphics processing unit from a consumer of the graphics processing unit;
convey status information associated with the task to the consumer of the graphics processing unit, wherein the status information includes an indication of whether the task is preempted; and
initiate the security action by the consumer based on the indication, wherein the security action by the consumer includes at least one of a memory scan of a process that preempted the task or a restriction of the process that preempted the task.
16. The storage medium as defined in claim 15 , wherein the instructions, when executed, cause the machine to convey the status information to the consumer of the graphics processing unit by conveying the status information at a privilege level associated with trusted components.
17. The storage medium as defined in claim 15 , wherein the instructions, when executed, cause the machine to obtain the status information and obtain a change in the status information.
18. The storage medium as defined in claim 15 , wherein the status information comprises an identifier of the process that preempted the task.
19. The storage medium as defined in claim 18 , wherein the instructions, when executed, cause the machine to use the status information to evaluate the process that preempted the task.
20. The storage medium as defined in claim 15 , wherein the consumer is a security application and the task is a malware detection scan associated with the security application.
21. The storage medium as defined in claim 15 , wherein the instructions, when executed, cause the machine to obtain, from the consumer of the graphics processing unit, a request for a notification of a particular aspect of the status information.