Invention Application
- Patent Title: Control Flow Integrity System and Method
- Patent Title (中): 控制流完整性系统与方法
-
Application No.: US14538643Application Date: 2014-11-11
-
Publication No.: US20150135313A1Publication Date: 2015-05-14
- Inventor: Andrew Michael WESIE , Brian Sejoon PAK
- Applicant: Kaprica Security, Inc.
- Main IPC: G06F21/51
- IPC: G06F21/51

Abstract:
An improved CFI system and method is described that provides security from attacks to hijack computer software. The improved CFI system and method inserts two tags to execute label identification. The first tag is positioned before any instruction that would result in an indirect control flow transfer and requires the program to execute a check. The second tag is located before the first line of any legitimate transfer destination and when discovered by the tag check allows a program to carry out the indirect transfer. This tag orientation does not prevent transfers to targets other than the origin instruction's specific intended destination but limits transfers to destinations that begin with the proper label dedication. Although, an incorrect address may be called, that will be within the software program's assortment of legitimate indirect transfer targets. Attempts to exploit or reroute indirect transfers outside of the established control flow are eliminated.
Public/Granted literature
- US09805188B2 Control flow integrity system and method Public/Granted day:2017-10-31
Information query