Dynamically sharing a stack between different code segments
    31.
    发明申请
    Dynamically sharing a stack between different code segments 失效
    在不同代码段之间动态共享堆栈

    公开(公告)号:US20080022065A1

    公开(公告)日:2008-01-24

    申请号:US11490824

    申请日:2006-07-21

    IPC分类号: G06F12/00

    CPC分类号: G06F12/1475 G06F12/145

    摘要: In one embodiment, the present invention includes a method for receiving a request from a caller code portion of a first color to color at least a portion of a stack with a second color, determining if the request is valid, and if so remapping the stack portion from a first mapping colored with the first color to a second mapping colored with the second color. Other embodiments are described and claimed.

    摘要翻译: 在一个实施例中,本发明包括一种方法,用于从第一颜色的呼叫者代码部分接收请求以对具有第二颜色的堆栈的至少一部分进行着色,确定请求是否有效,以及如果重新映射堆栈 从具有第一颜色的第一映射部分到第二颜色的第二映射。 描述和要求保护其他实施例。

    GENERATING MULTIPLE ADDRESS SPACE IDENTIFIERS PER VIRTUAL MACHINE TO SWITCH BETWEEN PROTECTED MICRO-CONTEXTS
    32.
    发明申请
    GENERATING MULTIPLE ADDRESS SPACE IDENTIFIERS PER VIRTUAL MACHINE TO SWITCH BETWEEN PROTECTED MICRO-CONTEXTS 有权
    每个虚拟机产生多个地址空间识别器,以保护受保护的微控制器

    公开(公告)号:US20130036291A1

    公开(公告)日:2013-02-07

    申请号:US13650227

    申请日:2012-10-12

    IPC分类号: G06F12/10

    CPC分类号: G06F12/1027 G06F12/145

    摘要: Embodiments of an invention for generating multiple address space identifiers per virtual machine to switch between protected micro-contexts are disclosed. In one embodiment, a method includes receiving an instruction requiring an address translation; initiating, in response to receiving the instruction, a page walk from a page table pointed to by the contents of a page table pointer storage location; finding, during the page walk, a transition entry; storing the address translation and one of a plurality of address source identifiers in a translation lookaside buffer, the one of the plurality of address source identifiers based on one of a plurality of a virtual partition identifiers, at least two of the plurality of virtual partition identifiers associated with one of a plurality of virtual machines; and re-initiating the page walk.

    摘要翻译: 公开了用于在每个虚拟机之间生成多个地址空间标识符以在受保护的微上下文之间切换的发明的实施例。 在一个实施例中,一种方法包括接收需要地址转换的指令; 响应于接收到指令,从页表指针存储位置的内容指向的页表中启动页面移动; 在页面散步期间发现转换条目; 将地址转换和多个地址源标识符之一存储在转换后备缓冲器中,所述多个地址源标识符中的一个基于多个虚拟分区标识符中的一个,多个虚拟分区标识符中的至少两个 与多个虚拟机中的一个相关联; 并重新启动页面散步。

    Dynamically sharing a stack between different code segments
    33.
    发明授权
    Dynamically sharing a stack between different code segments 失效
    在不同代码段之间动态共享堆栈

    公开(公告)号:US07512768B2

    公开(公告)日:2009-03-31

    申请号:US11490824

    申请日:2006-07-21

    CPC分类号: G06F12/1475 G06F12/145

    摘要: In one embodiment, the present invention includes a method for receiving a request from a caller code portion of a first color to color at least a portion of a stack with a second color, determining if the request is valid, and if so remapping the stack portion from a first mapping colored with the first color to a second mapping colored with the second color. Other embodiments are described and claimed.

    摘要翻译: 在一个实施例中,本发明包括一种方法,用于从第一颜色的呼叫者代码部分接收请求以对具有第二颜色的堆栈的至少一部分进行着色,确定请求是否有效,以及如果重新映射堆栈 从具有第一颜色的第一映射部分到第二颜色的第二映射。 描述和要求保护其他实施例。

    Monitoring a target agent execution pattern on a VT-enabled system
    34.
    发明申请
    Monitoring a target agent execution pattern on a VT-enabled system 失效
    在启用VT的系统上监视目标代理执行模式

    公开(公告)号:US20080082722A1

    公开(公告)日:2008-04-03

    申请号:US11541474

    申请日:2006-09-29

    IPC分类号: G06F21/00

    CPC分类号: G06F21/56 G06F21/57

    摘要: Methods, apparatuses, articles, and systems for observing, by a virtual machine manager of a physical device, execution of a target process of a virtual machine of the physical device, including virtual addresses of the virtual machine referenced during the execution, are described herein. The virtual machine manager further determines whether the target process is executing in an expected manner based at least in part on the observed virtual address references and expected virtual address references.

    摘要翻译: 本文描述了由物理设备的虚拟机管理器观察物理设备的虚拟机的目标进程(包括在执行期间引用的虚拟机的虚拟地址)的方法,装置,物品和系统 。 虚拟机管理器进一步基于观察到的虚拟地址引用和预期的虚拟地址引用来进一步确定目标进程是否以预期的方式执行。

    Method and apparatus for adaptive integrity measurement of computer software
    35.
    发明授权
    Method and apparatus for adaptive integrity measurement of computer software 有权
    计算机软件自适应完整性测量的方法和装置

    公开(公告)号:US08327359B2

    公开(公告)日:2012-12-04

    申请号:US13356918

    申请日:2012-01-24

    IPC分类号: G06F9/455 G06F7/04

    摘要: Systems and methods are described herein that discuss how a computing platform executing a virtualized environment, in one example, can be integrity verified adaptively and on demand. This may occur at initial runtime, as well as during continued operations, and allows the platform user to install software from various vendors without sacrificing the integrity measurement and therefore the trustworthiness of the platform.

    摘要翻译: 本文描述了系统和方法,其讨论了如何在一个示例中执行虚拟化环境的计算平台可以自适应地且按需地进行完整性验证。 这可能会在初始运行时以及连续操作期间发生,并允许平台用户从各种供应商安装软件,而不会牺牲完整性测量,因此可以平台的可信赖性。

    Maintaining shadow page tables in a sequestered memory region
    38.
    发明授权
    Maintaining shadow page tables in a sequestered memory region 有权
    在隔离内存区域中维护阴影页表

    公开(公告)号:US07467285B2

    公开(公告)日:2008-12-16

    申请号:US11191468

    申请日:2005-07-27

    IPC分类号: G06F12/00

    摘要: Provided are a method, system, program and device for maintaining shadow page tables in a sequestered memory region. A first processor executing an application invokes a second processor to create a shadow page table used for address translation for the application in a sequestered memory region non-alterable by processes controlled by an operating system executed by the first processor. The shadow page table references at least one page in an operating system memory region accessible to processes controlled by the operating system.

    摘要翻译: 提供了一种用于在隔离存储器区域中保持阴影页表的方法,系统,程序和设备。 执行应用的第一处理器调用第二处理器来创建用于经由由第一处理器执行的操作系统控制的进程不可修改的存储存储器区域中的应用的地址转换的影子页表。 影子页面表引用由操作系统控制的进程可访问的操作系统存储器区域中的至少一个页面。

    USING SOFTWARE HAVING CONTROL TRANSFER TERMINATION INSTRUCTIONS WITH SOFTWARE NOT HAVING CONTROL TRANSFER TERMINATION INSTRUCTIONS
    40.
    发明申请
    USING SOFTWARE HAVING CONTROL TRANSFER TERMINATION INSTRUCTIONS WITH SOFTWARE NOT HAVING CONTROL TRANSFER TERMINATION INSTRUCTIONS 有权
    使用不具有控制转移终止指令的软件控制转移指令的软件

    公开(公告)号:US20150095617A1

    公开(公告)日:2015-04-02

    申请号:US14039663

    申请日:2013-09-27

    IPC分类号: G06F9/30

    摘要: In an embodiment, the present invention includes a processor having a decode unit, an execution unit, and a retirement unit. The decode unit is to decode control transfer instructions and the execution unit is to execute control transfer instructions. The retirement unit is to retire a first control transfer instruction, and to raise a fault if a next instruction to be retired after the first control transfer instruction is not a second control transfer instruction and a target instruction of the first control transfer instruction is in code using the control transfer instructions.

    摘要翻译: 在一个实施例中,本发明包括具有解码单元,执行单元和退休单元的处理器。 解码单元用于解码控制传输指令,执行单元执行控制传输指令。 退休单元将退出第一控制传输指令,并且如果在第一控制传输指令之后的下一指令不是第二控制传送指令并且第一控制传输指令的目标指令处于代码中,则引起故障 使用控制传输指令。