Protection against return oriented programming attacks

    公开(公告)号:US10049212B2

    公开(公告)日:2018-08-14

    申请号:US14861210

    申请日:2015-09-22

    Abstract: In one embodiment, a processor includes at least one execution unit. The processor also includes a Return Oriented Programming (ROP) logic coupled to the at least one execution unit. The ROP logic may validate a return pointer stored on a call stack based on a secret ROP value. The secret ROP value may only be accessible by the operating system.

    Detection of return oriented programming attacks
    7.
    发明授权
    Detection of return oriented programming attacks 有权
    检测面向回程的编程攻击

    公开(公告)号:US09582663B2

    公开(公告)日:2017-02-28

    申请号:US14960709

    申请日:2015-12-07

    CPC classification number: G06F21/552 G06F9/30145 G06F21/566 G06F2221/034

    Abstract: In one embodiment, a processor includes at least one execution unit and Return Oriented Programming (ROP) detection logic. The ROP detection logic may determine a ROP metric based on a plurality of control transfer events. The ROP detection logic may also determine whether the ROP metric exceeds a threshold. The ROP detection logic may also, in response to a determination that the ROP metric exceeds the threshold, provide a ROP attack notification.

    Abstract translation: 在一个实施例中,处理器包括至少一个执行单元和返回定向编程(ROP)检测逻辑。 ROP检测逻辑可以基于多个控制传送事件来确定ROP度量。 ROP检测逻辑还可以确定ROP度量是否超过阈值。 ROP检测逻辑还可以响应于ROP度量超过阈值的确定,提供ROP攻击通知。

Patent Agency Ranking