Method for secure function execution by calling address validation
作者： Oded Horvitz
DOI:
关键词: Kernel (statistics) 、 System call 、 Real-time computing 、 Operating system 、 Space (commercial competition) 、 Computer science 、 Function (engineering) 、 Process (computing) 、 Range (statistics)
摘要: A method of secure function execution is performed in a computer system (100) running an operating platform having systenm including kernel space (114) and process (112) user application the (112). call intercepted (190) examined for validity (196) by comparing originating address with range valid addresses associated (194). Notification provided as to (166). The can be terminated when found invalid (180).
google.co.uk 参考文章(22)
Gilad Odinak, Richard P. Draves, Virtual memory system with hardware TLB and unmapped software TLB updated from mapped task address maps using unmapped kernel address map ,(1996)
Vincent Hsieh, Method for security shield implementation in computer system's software ,(1997)
Kazuko Watanabe, Message-based data processing system that provides checking for access to server space ,(1992)
Bruce D. Karsh, Brendan O. Eich, J. Wiltse Carpenter, Eva Manolis, File alteration monitor for computer operating and file management systems ,(1990)
Yuval Yarom, Apparatus for and method of providing user exits on an operating system platform ,(1995)
Russ W. Herrell, Thomas P. Morrissey, User scheduled direct memory access using virtual addresses ,(1991)
Eric Nassar Robertson, Roderick Lee Dorris, Portable microkernel operating system verification and testing ,(1995)
Choi Yang-Seo, Seo Dong-il, Sohn Sung-Won, A New Stack Buffer Overflow Hacking Defense Technique with Memory Address Confirmation international conference on information security and cryptology. pp. 146- 159 ,(2001) , 10.1007/3-540-45861-1_12
John Simmons, David J. Roberts, Protection of data processing system against unauthorized programs ,(1977)
Bruce Gerard Mealey, James William Van Fleet, Michael Stephen Williams, Interrupt vectoring for optionally architected facilities in computer systems ,(1996)