JP2018152061A - 安全なジャストインタイム(jit)コード生成 - Google Patents

安全なジャストインタイム(jit)コード生成 Download PDF

Info

Publication number
JP2018152061A
JP2018152061A JP2018035322A JP2018035322A JP2018152061A JP 2018152061 A JP2018152061 A JP 2018152061A JP 2018035322 A JP2018035322 A JP 2018035322A JP 2018035322 A JP2018035322 A JP 2018035322A JP 2018152061 A JP2018152061 A JP 2018152061A
Authority
JP
Japan
Prior art keywords
jit
code segment
code
shared memory
execution process
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
JP2018035322A
Other languages
English (en)
Japanese (ja)
Other versions
JP2018152061A5 (enExample
Inventor
ウディ ヤーヴォ
Udi Yavo
ウディ ヤーヴォ
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Ensilo Ltd
Original Assignee
Ensilo Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ensilo Ltd filed Critical Ensilo Ltd
Publication of JP2018152061A publication Critical patent/JP2018152061A/ja
Publication of JP2018152061A5 publication Critical patent/JP2018152061A5/ja
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/52Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
    • G06F21/53Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55Detecting local intrusion or implementing counter-measures
    • G06F21/56Computer malware detection or handling, e.g. anti-virus arrangements
    • G06F21/562Static detection
    • G06F21/563Static detection by source code analysis
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00Arrangements for software engineering
    • G06F8/40Transformation of program code
    • G06F8/41Compilation
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/455Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45504Abstract machines for programme code execution, e.g. Java virtual machine [JVM], interpreters, emulators
    • G06F9/45516Runtime code conversion or optimisation
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/455Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45504Abstract machines for programme code execution, e.g. Java virtual machine [JVM], interpreters, emulators
    • G06F9/45516Runtime code conversion or optimisation
    • G06F9/4552Involving translation to a different instruction set architecture, e.g. just-in-time translation in a JVM
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/03Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
    • G06F2221/033Test or assess software

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Virology (AREA)
  • Stored Programmes (AREA)
  • Devices For Executing Special Programs (AREA)
JP2018035322A 2017-03-05 2018-02-28 安全なジャストインタイム(jit)コード生成 Pending JP2018152061A (ja)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US15/449,965 US10795989B2 (en) 2017-03-05 2017-03-05 Secure just-in-time (JIT) code generation
US15/449,965 2017-03-05

Publications (2)

Publication Number Publication Date
JP2018152061A true JP2018152061A (ja) 2018-09-27
JP2018152061A5 JP2018152061A5 (enExample) 2021-03-18

Family

ID=61557080

Family Applications (1)

Application Number Title Priority Date Filing Date
JP2018035322A Pending JP2018152061A (ja) 2017-03-05 2018-02-28 安全なジャストインタイム(jit)コード生成

Country Status (6)

Country Link
US (1) US10795989B2 (enExample)
EP (1) EP3373133B1 (enExample)
JP (1) JP2018152061A (enExample)
CA (1) CA2996747A1 (enExample)
IL (1) IL257893B (enExample)
SG (1) SG10201801669XA (enExample)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11822654B2 (en) * 2017-04-20 2023-11-21 Morphisec Information Security 2014 Ltd. System and method for runtime detection, analysis and signature determination of obfuscated malicious code
CN113360134B (zh) * 2020-03-06 2022-06-17 武汉斗鱼网络科技有限公司 安全验证程序的生成方法、装置、设备和存储介质
US11487565B2 (en) * 2020-10-29 2022-11-01 Hewlett Packard Enterprise Development Lp Instances of just-in-time (JIT) compilation of code using different compilation settings
US11816484B2 (en) * 2020-10-30 2023-11-14 Apple Inc. Hardware verification of dynamically generated code

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2006048186A (ja) * 2004-08-02 2006-02-16 Hitachi Ltd 動的コンパイラの生成コードを保護する言語処理系
US20070283336A1 (en) * 2006-06-01 2007-12-06 Michael Karl Gschwind System and method for just-in-time compilation in a heterogeneous processing environment
JP2010511227A (ja) * 2006-11-28 2010-04-08 マイクロソフト コーポレーション 信頼性の低いアドレス空間への実行コードのコンパイル

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7600222B2 (en) * 2002-01-04 2009-10-06 Microsoft Corporation Systems and methods for managing drivers in a computing system
US7219329B2 (en) * 2003-06-13 2007-05-15 Microsoft Corporation Systems and methods providing lightweight runtime code generation
US7603712B2 (en) * 2005-04-21 2009-10-13 Microsoft Corporation Protecting a computer that provides a Web service from malware
US8156093B2 (en) * 2009-03-10 2012-04-10 Microsoft Corporaton Memory object sharing for just in time compiled data
US8677329B2 (en) * 2009-06-03 2014-03-18 Apple Inc. Methods and apparatuses for a compiler server
JP6555981B2 (ja) * 2015-08-24 2019-08-07 キヤノン株式会社 情報処理装置及びその制御方法
US10303885B2 (en) * 2016-03-02 2019-05-28 Apple Inc. Methods and systems for securely executing untrusted software

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2006048186A (ja) * 2004-08-02 2006-02-16 Hitachi Ltd 動的コンパイラの生成コードを保護する言語処理系
US20070283336A1 (en) * 2006-06-01 2007-12-06 Michael Karl Gschwind System and method for just-in-time compilation in a heterogeneous processing environment
JP2010511227A (ja) * 2006-11-28 2010-04-08 マイクロソフト コーポレーション 信頼性の低いアドレス空間への実行コードのコンパイル

Also Published As

Publication number Publication date
HK1255149A1 (en) 2019-08-09
EP3373133B1 (en) 2021-02-24
SG10201801669XA (en) 2018-10-30
EP3373133A1 (en) 2018-09-12
US10795989B2 (en) 2020-10-06
US20180253549A1 (en) 2018-09-06
IL257893B (en) 2022-01-01
IL257893A (en) 2018-04-30
CA2996747A1 (en) 2018-09-05

Similar Documents

Publication Publication Date Title
JP6837064B2 (ja) ランタイム生成コードにおける悪意のあるコードの検出のためのシステムおよび方法
Octeau et al. Effective {Inter-Component} communication mapping in android: An essential step towards holistic security analysis
EP3123311B1 (en) Malicious code protection for computer systems based on process modification
US8756587B2 (en) Static analysis of computer software applications
JP2015141718A (ja) プログラムの脆弱点を用いた攻撃の探知装置および方法
US11409865B1 (en) Verification code injection at build time
CN103559446A (zh) 一种基于安卓系统的设备的动态病毒检测方法和装置
Graa et al. Detecting control flow in smarphones: Combining static and dynamic analyses
US11620129B1 (en) Agent-based detection of fuzzing activity associated with a target program
US12481794B2 (en) Analyzing scripts to create and enforce security policies in dynamic development pipelines
JP2018152061A (ja) 安全なジャストインタイム(jit)コード生成
CN114641770A (zh) 使用页帧标签机制来增强存储器安全编程
US11609985B1 (en) Analyzing scripts to create and enforce security policies in dynamic development pipelines
US10545745B2 (en) Application binary rewriting to reduce binary attack surface area
US20250061053A1 (en) Secure and seamless injection of secrets based on execution debugging
Armando et al. SAM: the static analysis module of the MAVERIC mobile app security verification platform
JP5989599B2 (ja) 情報処理装置、および、情報処理方法
JP7076014B2 (ja) プログラム保護のためのJavaデバッガ遮断方法およびシステム
US20250077198A1 (en) Exploit prevention based on generation of random chaotic execution context
HK1255149B (en) Secure just-in-time (jit) code generation
Chen et al. Vulnerability-based backdoors: Threats from two-step trojans
Kononenko An approach to error correction in program code using dynamic optimization in a virtual execution environment
KR20250168627A (ko) 실시간 셸코드 검출 및 방지
Ashouri et al. JACY: a JVM-Based Intrusion Detection and Security Analysis System
Yuhui et al. The behavioral analysis of Android malware

Legal Events

Date Code Title Description
A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20180314

RD01 Notification of change of attorney

Free format text: JAPANESE INTERMEDIATE CODE: A7426

Effective date: 20180518

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A821

Effective date: 20180521

A711 Notification of change in applicant

Free format text: JAPANESE INTERMEDIATE CODE: A711

Effective date: 20200721

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20210121

A621 Written request for application examination

Free format text: JAPANESE INTERMEDIATE CODE: A621

Effective date: 20210121

A977 Report on retrieval

Free format text: JAPANESE INTERMEDIATE CODE: A971007

Effective date: 20211110

A131 Notification of reasons for refusal

Free format text: JAPANESE INTERMEDIATE CODE: A131

Effective date: 20211116

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20220215

A02 Decision of refusal

Free format text: JAPANESE INTERMEDIATE CODE: A02

Effective date: 20220712

C60 Trial request (containing other claim documents, opposition documents)

Free format text: JAPANESE INTERMEDIATE CODE: C60

Effective date: 20221110

C22 Notice of designation (change) of administrative judge

Free format text: JAPANESE INTERMEDIATE CODE: C22

Effective date: 20221213

C22 Notice of designation (change) of administrative judge

Free format text: JAPANESE INTERMEDIATE CODE: C22

Effective date: 20230104

C30 Protocol of an oral hearing

Free format text: JAPANESE INTERMEDIATE CODE: C30

Effective date: 20230310

C23 Notice of termination of proceedings

Free format text: JAPANESE INTERMEDIATE CODE: C23

Effective date: 20230322

C03 Trial/appeal decision taken

Free format text: JAPANESE INTERMEDIATE CODE: C03

Effective date: 20230425

C30A Notification sent

Free format text: JAPANESE INTERMEDIATE CODE: C3012

Effective date: 20230425