USER-MODE INTERRUPT REQUEST PROCESSING METHOD AND APPARATUS

    公开(公告)号:US20240126593A1

    公开(公告)日:2024-04-18

    申请号:US18397184

    申请日:2023-12-27

    CPC classification number: G06F9/4818

    Abstract: The present disclosure relates to user-mode interrupt request processing methods and apparatuses. In one example method, a central processing unit (CPU) in a kernel mode runs a second interrupt exception handler that does not include a kernel address to determine a user-mode interrupt handler corresponding to a user-mode interrupt request, switches to a user mode by using a first privilege level without context recovery, further runs the user-mode interrupt handler in the user mode, and then switches to the kernel mode by using a second privilege level without context storage.

    PROCESSOR TRACE-BASED ENFORCEMENT OF CONTROL FLOW INTEGRITY OF A COMPUTER SYSTEM

    公开(公告)号:US20180225446A1

    公开(公告)日:2018-08-09

    申请号:US15887468

    申请日:2018-02-02

    Abstract: A computer processing node is described that is configured to perform a control flow integrity (CFI) method on a protected process operating on the processing node. The CFI method includes intercepting a system call originating from execution of the protected process executing in the runtime environment. A fast path operating within a kernel of the computer system accesses, from a kernel memory, a processor trace packet corresponding to the system call. The fast path attempts to establish a match between the processor trace packet and a program control flow (edge) entry within a credit-labeled control flow graph (CFG) definition having an associated credit value. The credit value represents a degree to which the program control flow is credible. Thereafter, the method further includes invoking, after the matching, a slow path for further processing of the processor trace packet if the associated credit value does not meet a specified threshold, and otherwise provide an indication to permit execution of the system call.

Patent Agency Ranking