公开(公告)号：US10896253B2

公开(公告)日：2021-01-19

申请号：US15887468

申请日：2018-02-02

Applicant: Huawei Technologies Co., Ltd.

Inventor： Yutao Liu ,  Haibo Chen ,  Peitao Shi ,  Xinran Wang

IPC: G06F11/00 ,  G06F21/52 ,  G06F11/34 ,  G06F11/36 ,  G06F21/57

Abstract: A computer processing node is described that is configured to perform a control flow integrity (CFI) method on a protected process operating on the processing node. The CFI method includes intercepting a system call originating from execution of the protected process executing in the runtime environment. A fast path operating within a kernel of the computer system accesses, from a kernel memory, a processor trace packet corresponding to the system call. The fast path attempts to establish a match between the processor trace packet and a program control flow (edge) entry within a credit-labeled control flow graph (CFG) definition having an associated credit value. The credit value represents a degree to which the program control flow is credible. Thereafter, the method further includes invoking, after the matching, a slow path for further processing of the processor trace packet if the associated credit value does not meet a specified threshold, and otherwise provide an indication to permit execution of the system call.