SG10201701541SA - Device and method for reinforcing control flow integrity of software application - Google Patents

Device and method for reinforcing control flow integrity of software application

Info

Publication number
SG10201701541SA
SG10201701541SA SG10201701541SA SG10201701541SA SG10201701541SA SG 10201701541S A SG10201701541S A SG 10201701541SA SG 10201701541S A SG10201701541S A SG 10201701541SA SG 10201701541S A SG10201701541S A SG 10201701541SA SG 10201701541S A SG10201701541S A SG 10201701541SA
Authority
SG
Singapore
Prior art keywords
control flow
software application
flow integrity
reinforcing control
reinforcing
Prior art date
Application number
SG10201701541SA
Inventor
Ting Dai
Yongzheng Wu
Original Assignee
Huawei Int Pte Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Int Pte Ltd filed Critical Huawei Int Pte Ltd
Priority to SG10201701541SA priority Critical patent/SG10201701541SA/en
Priority to BR112019017714A priority patent/BR112019017714A2/en
Priority to PCT/SG2018/050086 priority patent/WO2018156085A1/en
Priority to CN201880013935.XA priority patent/CN110325994B/en
Priority to EP18709410.7A priority patent/EP3580680B1/en
Publication of SG10201701541SA publication Critical patent/SG10201701541SA/en
Priority to US16/552,534 priority patent/US11429511B2/en

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
    • G06F21/54—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by adding security routines or objects to programs
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/36—Preventing errors by testing or debugging software
    • G06F11/3604—Software analysis for verifying properties of programs
    • G06F11/3612—Software analysis for verifying properties of programs by runtime analysis
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/36—Preventing errors by testing or debugging software
    • G06F11/362—Software debugging
    • G06F11/3636—Software debugging by tracing the execution of the program
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/36—Preventing errors by testing or debugging software
    • G06F11/362—Software debugging
    • G06F11/3644—Software debugging by instrumenting at runtime
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/51—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/03—Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
    • G06F2221/033—Test or assess software

Abstract

DEVICE AND METHOD FOR REINFORCING CONTROL FLOW INTEGRITY OF SOFTWARE APPLICATION This document describes a device and method for a device to reinforce the control flow integrity of a software application as the application is being executed on the device. FIGURE 3
SG10201701541SA 2017-02-27 2017-02-27 Device and method for reinforcing control flow integrity of software application SG10201701541SA (en)

Priority Applications (6)

Application Number Priority Date Filing Date Title
SG10201701541SA SG10201701541SA (en) 2017-02-27 2017-02-27 Device and method for reinforcing control flow integrity of software application
BR112019017714A BR112019017714A2 (en) 2017-02-27 2018-02-26 Device and method for enforcing software application control flow integrity
PCT/SG2018/050086 WO2018156085A1 (en) 2017-02-27 2018-02-26 Device and method for reinforcing control flow integrity of software application
CN201880013935.XA CN110325994B (en) 2017-02-27 2018-02-26 Apparatus and method for enhancing control flow integrity of software applications
EP18709410.7A EP3580680B1 (en) 2017-02-27 2018-02-26 Device and method for reinforcing control flow integrity of software application
US16/552,534 US11429511B2 (en) 2017-02-27 2019-08-27 Device and method for reinforcing control flow integrity of software application

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
SG10201701541SA SG10201701541SA (en) 2017-02-27 2017-02-27 Device and method for reinforcing control flow integrity of software application

Publications (1)

Publication Number Publication Date
SG10201701541SA true SG10201701541SA (en) 2018-09-27

Family

ID=61581698

Family Applications (1)

Application Number Title Priority Date Filing Date
SG10201701541SA SG10201701541SA (en) 2017-02-27 2017-02-27 Device and method for reinforcing control flow integrity of software application

Country Status (6)

Country Link
US (1) US11429511B2 (en)
EP (1) EP3580680B1 (en)
CN (1) CN110325994B (en)
BR (1) BR112019017714A2 (en)
SG (1) SG10201701541SA (en)
WO (1) WO2018156085A1 (en)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11687646B2 (en) * 2019-08-15 2023-06-27 Dellfer, Inc. Forensic data collection and analysis utilizing function call stacks
CN112668004B (en) * 2019-10-16 2022-06-21 武汉斗鱼网络科技有限公司 LLVM-based function verification method and related device
CN111898130B (en) * 2020-06-28 2024-01-19 中国科学院信息工程研究所 Method and system for realizing integrity protection of fine-grained control flow
CN112799725B (en) * 2020-10-30 2024-03-26 航天东方红卫星有限公司 Design method of instruction control data block function suitable for satellite model
US20220188463A1 (en) * 2020-12-16 2022-06-16 International Business Machines Corporation Method and system for on demand control of hardware support for software pointer authentification in a computing system
WO2023107261A1 (en) * 2021-12-08 2023-06-15 Qualcomm Incorporated Methods for improving security in computing devices implementing control flow integrity

Family Cites Families (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7577992B2 (en) 2005-01-14 2009-08-18 Microsoft Corporation Software security based on control flow integrity
EP1870829B1 (en) * 2006-06-23 2014-12-03 Microsoft Corporation Securing software by enforcing data flow integrity
US8341613B2 (en) * 2007-12-04 2012-12-25 International Business Machines Corporation Reducing stack space consumption via head-call optimization
US8117660B2 (en) 2008-06-19 2012-02-14 Microsoft Corporation Secure control flows by monitoring control transfers
US8464011B2 (en) * 2008-10-27 2013-06-11 Advanced Micro Devices, Inc. Method and apparatus for providing secure register access
US20100192026A1 (en) * 2009-01-27 2010-07-29 Microsoft Corporation Implementations of program runtime checks
WO2011116448A1 (en) * 2010-03-25 2011-09-29 Irdeto Canada Corporation System and method for dynamic, variably-timed operation paths as a resistance to side channel and repeated invocation attacks
US9798873B2 (en) * 2011-08-04 2017-10-24 Elwha Llc Processor operable to ensure code integrity
US20130024676A1 (en) * 2011-07-19 2013-01-24 Glew Andrew F Control flow integrity
US8943313B2 (en) * 2011-07-19 2015-01-27 Elwha Llc Fine-grained security in federated data sets
US11003464B2 (en) * 2012-04-19 2021-05-11 Microsoft Technology Licensing, Llc Control flow integrity enforcement at scale
CN103345445A (en) * 2013-07-02 2013-10-09 华中科技大学 Security chip design method based on control flow detection and resistant to error injection attack
US9805188B2 (en) * 2013-11-12 2017-10-31 RunSafe Security, Inc. Control flow integrity system and method
US9361102B2 (en) * 2014-06-09 2016-06-07 Lehigh University Methods for enforcing control flow of a computer program
US9390260B2 (en) 2014-06-09 2016-07-12 Lehigh University Methods for enforcing control flow of a computer program
US9767004B2 (en) * 2014-06-16 2017-09-19 Symantec Corporation Dynamic call tracking method based on CPU interrupt instructions to improve disassembly quality of indirect calls
US9569613B2 (en) * 2014-12-23 2017-02-14 Intel Corporation Techniques for enforcing control flow integrity using binary translation
US9767292B2 (en) * 2015-10-11 2017-09-19 Unexploitable Holdings Llc Systems and methods to identify security exploits by generating a type based self-assembling indirect control flow graph
CN105868626B (en) * 2016-03-25 2018-10-02 中国人民解放军信息工程大学 The method of monitoring software business conduct based on control stream coarseness integrality
CN106021110B (en) * 2016-05-24 2019-03-26 南京大学 Code huge profit attack detection method based on virtual table inheritance
CN106295258B (en) * 2016-08-04 2019-03-26 南京大学 For the shadow stack implementation method of integrity protection to be flowed after multithreading to control
US10372902B2 (en) * 2017-03-06 2019-08-06 Intel Corporation Control flow integrity

Also Published As

Publication number Publication date
CN110325994A (en) 2019-10-11
EP3580680A1 (en) 2019-12-18
BR112019017714A2 (en) 2022-03-22
CN110325994B (en) 2023-09-22
US20190384693A1 (en) 2019-12-19
WO2018156085A1 (en) 2018-08-30
US11429511B2 (en) 2022-08-30
EP3580680B1 (en) 2023-10-25

Similar Documents

Publication Publication Date Title
SG10201701541SA (en) Device and method for reinforcing control flow integrity of software application
MX2022013057A (en) System and method for controlling a vehicle.
MX2017012830A (en) Vehicle assistance.
GB2559895A (en) Field equipment model driven system
EP3243137A4 (en) Generating and executing a control flow
SG10201809399VA (en) System and method for reinforcing programming education through robotic feedback
GB2543900A (en) Distributed big data in a process control system
HK1218172A1 (en) A computer implemented method and a system for controlling dynamically the execution of a code
NZ729814A (en) Water management system and method
DE112018003927A5 (en) METHOD FOR REGULATING THE OUTPUT PRESSURE OF A HYDRAULIC DRIVE SYSTEM, USE OF THE METHOD AND HYDRAULIC DRIVE SYSTEM
EP3625740C0 (en) System and method for controlling a material flow at an intersection
EP3406880A4 (en) Waste gate valve control method and control device
GB2583391B (en) Control method and computer program
AR105335A1 (en) ANTI-SORTILINE MONOCLONAL ANTIBODIES
MX2020004448A (en) Threaded joint for pipes and method for producing threaded joint for pipes.
EP3406879A4 (en) Waste gate valve control method and control device
HUE059817T2 (en) System and method for an integrated control system for a diesel generating set
WO2014138650A3 (en) Extended length packer with timed setting
EP3846005A4 (en) Input device, control method, and program
GB202109559D0 (en) Well annular back pressure control system having one or more adjustable choke valves and method thereof
WO2019053273A8 (en) Vibro-tactile feedback method and device
EP3852027A4 (en) Optimization device, control method of optimization device, and control program of optimization device
MX2017007037A (en) Composition and method for treating nematodes.
SG11202103392SA (en) Methods and systems for automatically generating and executing a set of parameterized instruction templates
WO2017135955A8 (en) Managing a microfluidic device