Search International and National Patent Collections

1. (WO2018063756) SYSTEM, APPARATUS AND METHOD FOR PERFORMING ON-DEMAND BINARY ANALYSIS FOR DETECTING CODE REUSE ATTACKS

Pub. No.:    WO/2018/063756    International Application No.:    PCT/US2017/050209
Publication Date: Fri Apr 06 01:59:59 CEST 2018 International Filing Date: Thu Sep 07 01:59:59 CEST 2017
IPC: G06F 21/56
G06F 21/54
Applicants: INTEL CORPORATION
Inventors: INCE, Tugrul
YAMADA, Koichi
HARIKUMAR, Ajay
NAYSHTUT, Alex
Title: SYSTEM, APPARATUS AND METHOD FOR PERFORMING ON-DEMAND BINARY ANALYSIS FOR DETECTING CODE REUSE ATTACKS
Abstract:
In one embodiment, a binary translator to perform binary translation of code is to: perform a first binary analysis of a first code block to determine whether a second control transfer instruction is included in the first code block, where the first code block includes a return target of a first control transfer instruction; perform a second binary analysis of a second code block to determine whether the second code block includes the first control transfer instruction, where the second code block includes a call target of the second control transfer instruction; and store an address pair associated with the first control transfer instruction in a whitelist if the second control transfer instruction is included in the first code block and the first control transfer instruction is included in the second code block. Other embodiments are described and claimed.