Computing platform security methods and apparatus
Computing platform security methods and apparatus are disclosed. An example apparatus includes a security application to configure a security task, the security task to detect a malicious element on a computing platform, the computing platform including a central processing unit and a graphics processing unit; and an offloader to determine whether the central processing unit or the graphics processing unit is to execute the security task; and when the graphics processing unit is to execute the security task, offload the security task to the graphics processing unit for execution.
1. An apparatus comprising:
a notifier to provide status information associated with a malware detection scan to a requester of the malware detection scan, the status information including an indication of a process that preempted the malware detection scan;
a scan target selector to evaluate the process to identify memory corresponding to the process; and
a trigger event analyzer to initiate a security action based on (a) the indication of the process that preempted the malware detection scan and (b) the identified memory, at least one of the notifier, the scan target selector, or the trigger event analyzer including a logic circuit.
2. The apparatus of claim 1 , wherein the notifier is to provide the status at a privilege level associated with trusted components.
3. The apparatus of claim 1 , further including a scheduler to obtain at least one of the status information and a change in the status information.
4. The apparatus of claim 1 , wherein the requester is a security application associated with the malware detection scan.
5. The apparatus of claim 1 , wherein the security action includes at least one of a memory scan of at least the memory corresponding to the process that preempted the malware detection scan or a restriction of the process that preempted the malware detection scan.
6. A tangible machine readable storage medium comprising instructions that, when executed, cause a machine to, at least:
communicate status information associated with a malware detection scan to a requester, the status information including an indication of a process that preempted the malware detection scan;
select memory corresponding to the process based on the indication; and
trigger a scan of the memory corresponding to the process.
7. The storage medium of claim 6 , wherein the instructions cause the machine to communicate the status information at a privilege level associated with trusted components.
8. The storage medium of claim 6 , wherein the instructions cause the machine to process the status information to identify a change in the status information.
9. The storage medium of claim 6 , wherein the requester is a security application.
10. The storage medium of claim 6 , wherein the instructions cause the machine to restrict the process that preempted the malware detection scan.
11. An apparatus comprising:
means for communicating to communicate status information associated with a malware detection scan to a requester, the status information including an indication of a process that preempted the malware detection scan;
means for selecting to select memory corresponding to the process based on the indication; and
means for triggering to trigger a scan of the memory corresponding to the process.
12. The apparatus of claim 11 , wherein the communicating means is to provide the status information at a privilege level associated with trusted components.
13. The apparatus of claim 11 , further including means for obtaining to obtain the status information, the obtaining means to identify a change in the status information.
14. The apparatus of claim 11 , wherein the requester is a security application associated with the malware detection scan.
15. The apparatus of claim 11 , wherein the triggering means is to restrict the process that preempted the malware detection scan.
16. A method comprising:
providing, by executing an instruction with a processor, status information associated with a malware detection scan to a requester of the malware detection scan, the status information including an indication of a process that preempted the malware detection scan;
evaluating, by executing an instruction with the processor, the process to identify memory corresponding to the process; and
initiating, by executing an instruction with the processor, a security action based on the identified memory.
17. The method of claim 16 , wherein the providing of the status information is performed at a privilege level associated with trusted components.
18. The method of claim 16 , further including obtaining at least one of the status information and a status transition in the status information.
19. The method of claim 16 , wherein the requester is a security application.
20. The method of claim 16 , wherein the security action includes at least one of a memory scan of at least the memory corresponding to the process that preempted the malware detection scan or a restriction of the process that preempted the malware detection scan.