公开(公告)号：US20240160725A1

公开(公告)日：2024-05-16

申请号：US18349450

申请日：2023-07-10

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： GAE-IL AN ,  Dong-Wook KANG ,  HONG-IL JU

IPC: G06F21/54 ,  G06F21/55

CPC classification number: G06F21/54 ,  G06F21/554

Abstract: Disclosed herein are an apparatus and method for injecting control flow integrity security code based on a location. The apparatus identifies an indirect function call in input program code, generates indirect function call location information by analyzing the identified indirect function call, and injects control flow integrity security code into the program code using the generated indirect function call location information.

公开(公告)号：US20250165620A1

公开(公告)日：2025-05-22

申请号：US18923303

申请日：2024-10-22

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： HONG-IL JU ,  Dong-Wook KANG ,  GAE-IL AN

IPC: G06F21/57

Abstract: Disclosed herein is a method for detecting a security vulnerability of dynamic memory. The method includes allocating a heap area in physical memory in response to a heap allocation request from a user, allocating a heap area of virtual memory corresponding to the heap area in the physical memory, and returning a heap allocation address to the user, and the heap allocation address includes heap authentication information, heap allocation address identification information, and heap size information.