公开(公告)号：US20190228149A1

公开(公告)日：2019-07-25

申请号：US16367530

申请日：2019-03-28

Applicant: Samsung Electronics Co., Ltd.

Inventor： James GLEESON ,  Ahmed AZAB ,  Wenbo SHEN ,  Rohan BHUTKAR

IPC: G06F21/55 ,  G06F21/57 ,  G06F21/12

Abstract: An apparatus and a method for protecting kernel control-flow integrity using static binary instrumentation are provided. The method includes configuring a compiler to reserve a register in a processor, compiling source code into a binary based on the configured compiler, and modifying the binary to prevent exploits using the reserved register, wherein the reserved register stores a first encryption key for encrypting and decrypting return addresses. The reserved register stores an encryption key that is used to encrypt and decrypt return addresses to prevent control flow exploits.

公开(公告)号：US20170140148A1

公开(公告)日：2017-05-18

申请号：US15340447

申请日：2016-11-01

Applicant: Samsung Electronics Co., Ltd.

Inventor： James GLEESON ,  Ahmed AZAB ,  Wenbo SHEN ,  Rohan BHUTKAR

IPC: G06F21/55 ,  G06F21/12 ,  G06F21/57

CPC classification number: G06F21/556 ,  G06F8/41 ,  G06F21/125 ,  G06F21/57 ,  G06F2221/033

Abstract: An apparatus and a method for protecting kernel control-flow integrity using static binary instrumentation are provided. The method includes configuring a compiler to reserve a register in a processor, compiling source code into a binary based on the configured compiler, and modifying the binary to prevent exploits using the reserved register, wherein the reserved register stores a first encryption key for encrypting and decrypting return addresses. The reserved register stores an encryption key that is used to encrypt and decrypt return addresses to prevent control flow exploits.