公开(公告)号：US09823843B2

公开(公告)日：2017-11-21

申请号：US14806842

申请日：2015-07-23

Applicant: QUALCOMM Incorporated

Inventor： Mihai Christodorescu ,  Satyajit Prabhakar Patne ,  Sumita Rao ,  Vikram Nair

IPC: G06F11/00 ,  G06F12/14 ,  G06F12/16 ,  G08B23/00 ,  G06F3/06 ,  G06F21/55

CPC classification number: G06F3/0604 ,  G06F3/0653 ,  G06F3/0683 ,  G06F21/552

Abstract: Systems, methods, and devices of the various aspects enable identification of anomalous application behavior by monitoring memory accesses by an application running on a computing device. In various aspects, a level of memory access monitoring may be based on a risk level of an application running on the computing device. The risk level may be determined based on memory address accesses of the application monitored by an address monitoring unit of one or more selected memory hierarchy layers of the computing device. The memory hierarchy layers selected for monitoring for memory address accesses of the application may be based on the determined risk level of the application. Selected memory hierarchy layers may be monitored by enabling one or more address monitoring units (AMUs) associated with the selected one or more memory hierarchy layers. The enabling of selected AMUs may be accomplished by an AMU selection module.

公开(公告)号：US20170024135A1

公开(公告)日：2017-01-26

申请号：US14806842

申请日：2015-07-23

Applicant: QUALCOMM Incorporated

Inventor： Mihai Christodorescu ,  Satyajit Prabhakar Patne ,  Sumita Rao ,  Vikram Nair

IPC: G06F3/06

CPC classification number: G06F3/0604 ,  G06F3/0653 ,  G06F3/0683 ,  G06F21/552

Abstract: Systems, methods, and devices of the various aspects enable identification of anomalous application behavior by monitoring memory accesses by an application running on a computing device. In various aspects, a level of memory access monitoring may be based on a risk level of an application running on the computing device. The risk level may be determined based on memory address accesses of the application monitored by an address monitoring unit of one or more selected memory hierarchy layers of the computing device. The memory hierarchy layers selected for monitoring for memory address accesses of the application may be based on the determined risk level of the application. Selected memory hierarchy layers may be monitored by enabling one or more address monitoring units (AMUs) associated with the selected one or more memory hierarchy layers. The enabling of selected AMUs may be accomplished by an AMU selection module.

Abstract translation: 各个方面的系统，方法和设备使得能够通过监视运行在计算设备上的应用的存储器访问来识别异常应用行为。 在各个方面，存储器访问监视的级别可以基于在计算设备上运行的应用的风险级别。 可以基于由计算设备的一个或多个所选存储器层级层的地址监视单元监视的应用的存储器地址访问来确定风险级别。 选择用于监视应用程序的存储器地址访问的存储器层级层可以基于所确定的应用程序的风险级别。 可以通过启用与所选择的一个或多个存储器层级层相关联的一个或多个地址监视单元（AMU）来监视所选存储器层级层。 选择的AMU的使能可以由AMU选择模块来实现。