- 专利标题: STACK PIVOT DETECTION SYSTEMS AND METHODS
-
申请号: US15472181申请日: 2017-03-28
-
公开(公告)号: US20180285559A1公开(公告)日: 2018-10-04
- 发明人: Rodrigo Branco , Xiaoning Li , David M. Durham , Hongliang Gao , Stephen A. Fischer , Baiju V. Patel
- 申请人: Rodrigo Branco , Xiaoning Li , David M. Durham , Hongliang Gao , Stephen A. Fischer , Baiju V. Patel
- 主分类号: G06F21/52
- IPC分类号: G06F21/52 ; G06F21/55 ; G06F15/78
摘要:
The present disclosure is directed to systems and methods for detecting stack-pivot attacks in a processor-based device. Processor circuitry executes one or more applications via sequential execution of instructions on a stack. Stack pivot attacks occur when an attacker takes control of the stack and uses the stack to execute a series of code sections referred to as “gadgets.” A stack-pivot attack detector establishes an allowable processor stack offset change value associated with an application and monitors a processor stack offset change value responsive to an occurrence of a processor stack exchange instruction. A stack-pivot attack is detected when the processor offset change value exceeds the allowable processor stack offset change value. Upon detecting a stack-pivot attack, the stack-pivot detection circuitry causes the selective termination of the application.
信息查询