Detection of return oriented programming attacks
    24.
    发明授权
    Detection of return oriented programming attacks 有权
    检测面向回程的编程攻击

    公开(公告)号:US09223979B2

    公开(公告)日:2015-12-29

    申请号:US13664532

    申请日:2012-10-31

    CPC classification number: G06F21/552 G06F9/30145 G06F21/566 G06F2221/034

    Abstract: In one embodiment, a processor includes at least one execution unit and Return Oriented Programming (ROP) detection logic. The ROP detection logic may determine a ROP metric based on a plurality of control transfer events. The ROP detection logic may also determine whether the ROP metric exceeds a threshold. The ROP detection logic may also, in response to a determination that the ROP metric exceeds the threshold, provide a ROP attack notification.

    Abstract translation: 在一个实施例中,处理器包括至少一个执行单元和返回定向编程(ROP)检测逻辑。 ROP检测逻辑可以基于多个控制传送事件来确定ROP度量。 ROP检测逻辑还可以确定ROP度量是否超过阈值。 ROP检测逻辑还可以响应于ROP度量超过阈值的确定,提供ROP攻击通知。

Patent Agency Ranking