专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20060026569A1 Portion-level in-memory module authentication 有权
标题翻译：部分级内存模块认证
公开(公告)号：US20060026569A1
公开(公告)日：2006-02-02
申请号：US10902244
申请日：2004-07-29
申请人： Timothy Oerting , Philip Lafornara , Robert Oliver , Scott Brender , Michael Marr
发明人： Timothy Oerting , Philip Lafornara , Robert Oliver , Scott Brender , Michael Marr
IPC分类号： G06F9/44
CPC分类号： G06F21/51
摘要： Dynamic run-time verification of a module which is loaded in memory (in whole or in part) for execution is enabled by using pre-computed portion-level verification data for portions of the module smaller than the whole (e.g. at the page-level). A portion of the module as loaded into memory for execution can be verified. Pre-computed portion-level verification data is retrieved from storage and used to verify the loaded portions of the executable. Verification data may be, for example, a digitally signed hash of the portion. Where the operating system loader has modified the portion for execution, the modifications are reversed, removing any changes performed by the operating system. If the portion has not been tampered, this will return the portion to its original pre-loaded state. This version is then used to determine validity using the pre-computed portion-level verification. Additionally, during execution of the module, new portions/pages of the module which are loaded can be verified to ensure that they have not been changed, and a list of hot pages of the module can be made, including pages to be continually reverified, in order to ensure that no malicious changes have been made in the module.
摘要翻译：通过对小于整个模块的部分（例如在页面级别）使用预先计算的部分级验证数据来启用加载在存储器（整体或部分）中用于执行的模块的动态运行时验证）。可以验证加载到存储器中用于执行的模块的一部分。从存储器检索预先计算的部分级验证数据，并用于验证可执行文件的加载部分。验证数据可以是例如该部分的经数字签名的散列。在操作系统加载程序修改了执行部分的情况下，修改将相反，从而删除操作系统执行的任何更改。如果该部分没有被篡改，这将使该部分恢复到原来的预加载状态。然后使用该版本使用预先计算的部分级验证来确定有效性。此外，在执行模块期间，可以验证装载的模块的新部分/页面，以确保它们未被更改，并且可以制作模块的热页面列表，包括要不断重新验证的页面，以确保模块中不会发生恶意更改。

IPRDB

热门服务

关于我们

友情链接

联系方式