公开(公告)号：US10289842B2

公开(公告)日：2019-05-14

申请号：US15340447

申请日：2016-11-01

Applicant: Samsung Electronics Co., Ltd.

Inventor： James Gleeson ,  Ahmed Azab ,  Wenbo Shen ,  Rohan Bhutkar

IPC: G06F21/00 ,  G06F21/55 ,  G06F21/12 ,  G06F21/57 ,  G06F8/41

Abstract: An apparatus and a method for protecting kernel control-flow integrity using static binary instrumentation are provided. The method includes configuring a compiler to reserve a register in a processor, compiling source code into a binary based on the configured compiler, and modifying the binary to prevent exploits using the reserved register, wherein the reserved register stores a first encryption key for encrypting and decrypting return addresses. The reserved register stores an encryption key that is used to encrypt and decrypt return addresses to prevent control flow exploits.

公开(公告)号：US11120130B2

公开(公告)日：2021-09-14

申请号：US16367530

申请日：2019-03-28

Applicant: Samsung Electronics Co., Ltd.

Inventor： James Gleeson ,  Ahmed Azab ,  Wenbo Shen ,  Rohan Bhutkar

IPC: G06F21/00 ,  G06F21/55 ,  G06F21/12 ,  G06F21/57 ,  G06F8/41

Abstract: An apparatus and a method for protecting kernel control-flow integrity using static binary instrumentation are provided. The method includes configuring a compiler to reserve a register in a processor, compiling source code into a binary based on the configured compiler, and modifying the binary to prevent exploits using the reserved register, wherein the reserved register stores a first encryption key for encrypting and decrypting return addresses. The reserved register stores an encryption key that is used to encrypt and decrypt return addresses to prevent control flow exploits.