Pointguard: method and system for protecting programs against pointer corruption attacks
    1.
    发明授权
    Pointguard: method and system for protecting programs against pointer corruption attacks 有权
    Pointguard:用于保护程序免受指针破坏攻击的方法和系统

    公开(公告)号:US08631248B2

    公开(公告)日:2014-01-14

    申请号:US11932517

    申请日:2007-10-31

    IPC分类号: G06F21/00

    摘要: To protect computer programs against security attacks that attempt to corrupt pointers within the address space of the program, the value of a pointer is encrypted each time the pointer is initialized or modified, and then the value is decrypted before use, i.e., each time the pointer is read. Preferably, the encrypting and decrypting steps are effected by instructions generated by a compiler during compilation of the program. One convenient method of implementing the encrypting and decrypting steps is by XOR'ing the pointer with a predetermined encryption key value, which could be specially selected or selected at random.

    摘要翻译: 为了保护计算机程序免受试图破坏程序地址空间内的指针的安全攻击,每当指针初始化或修改时,指针的值被加密,然后在使用之前解密该值,即每次 指针被读取。 优选地,加密和解密步骤由编译器在程序编译期间产生的指令来实现。 实现加密和解密步骤的一个方便的方法是通过用预定的加密密钥值异或该指针,这可以被随机地特别选择或选择。

    Pointguard: method and system for protecting programs against pointer corruption attacks
    2.
    发明授权
    Pointguard: method and system for protecting programs against pointer corruption attacks 有权
    Pointguard:用于保护程序免受指针破坏攻击的方法和系统

    公开(公告)号:US07752459B2

    公开(公告)日:2010-07-06

    申请号:US10313940

    申请日:2002-12-06

    IPC分类号: G06F11/30 G06F12/14

    摘要: To protect computer programs against security attacks that attempt to corrupt pointers within the address space of the program, the value of a pointer is encrypted each time the pointer is initialized or modified, and then the value is decrypted before use, i.e., each time the pointer is read. Preferably, the encrypting and decrypting steps are effected by instructions generated by a compiler during compilation of the program. One convenient method of implementing the encrypting and decrypting steps is by XOR'ing the pointer with a predetermined encryption key value, which could be specially selected or selected at random.

    摘要翻译: 为了保护计算机程序免受试图破坏程序地址空间内的指针的安全攻击,每当指针初始化或修改时,指针的值被加密,然后在使用之前解密该值,即每次 指针被读取。 优选地,加密和解密步骤由编译器在程序编译期间产生的指令来实现。 实现加密和解密步骤的一个方便的方法是通过用预定的加密密钥值异或该指针,这可以被随机地特别选择或选择。