TECHNIQUES FOR DETECTING FALSE POSITIVE RETURN-ORIENTED PROGRAMMING ATTACKS
    2.
    发明申请
    TECHNIQUES FOR DETECTING FALSE POSITIVE RETURN-ORIENTED PROGRAMMING ATTACKS 有权
    用于检测正向返回的编程攻击的技术

    公开(公告)号:US20160180115A1

    公开(公告)日:2016-06-23

    申请号:US14582114

    申请日:2014-12-23

    Abstract: Various embodiments are generally directed to an apparatus, method and other techniques to determine whether a target address of a register for an execution instruction is valid or invalid based on a comparison between the target address and one or more valid target addresses stored in a storage, increase a number of invalid target addresses if the target address is invalid, and determine whether the number of invalid target addresses is greater than an invalid target address threshold. Various embodiments may also include initiating a security measure to prevent a security breach if the number of invalid target addresses is greater than the invalid target address threshold or executing the execution instruction if the number of invalid target addresses is less than or equal to the invalid target address threshold.

    Abstract translation: 各种实施例通常涉及一种装置,方法和其他技术,用于基于存储在存储器中的目标地址与一个或多个有效目标地址之间的比较来确定执行指令的寄存器的目标地址是有效还是无效, 如果目标地址无效,则增加无效目标地址的数量,并确定无效目标地址的数量是否大于无效的目标地址阈值。 各种实施例还可以包括启动安全措施,以防止无效目标地址的数量大于无效目标地址阈值时的安全漏洞,或者如果无效目标地址的数量小于或等于无效目标地址,则执行执行指令 地址阈值。

Patent Agency Ranking