发明授权
- 专利标题: Binary translation and randomization system for application security
- 专利标题(中): 二进制翻译和随机系统的应用安全
-
申请号: US13964917申请日: 2013-08-12
-
公开(公告)号: US09147070B2公开(公告)日: 2015-09-29
- 发明人: Maksim Panchenko , Joe Epstein , Jan Civlin
- 申请人: Cisco Technology, Inc.
- 申请人地址: US CA San Jose
- 专利权人: Cisco Technology, Inc.
- 当前专利权人: Cisco Technology, Inc.
- 当前专利权人地址: US CA San Jose
- 代理机构: Hickman Palermo Truong Becker LLP
- 主分类号: G06F9/45
- IPC分类号: G06F9/45 ; G06F21/54 ; G06F21/14
摘要:
In one embodiment, methods are described to provide a binary translation and randomization system. Relocation metadata is received, which comprises, for each of a plurality of execution units in an executable file, a mapping from the executable file into an address space range. For at least one of the plurality of execution units, the mapping is modified to replace instructions within the address space range with a relocated copy of the instructions at a randomly located address space range. An order of the plurality of execution units may thus be modified. An image is generated from the executable file using the relocation metadata, and an execution of the image is caused. The randomization may be carried out in two passes to provide executable files that are uniquely randomized for each computer and for each execution.
公开/授权文献
信息查询