Invention Grant
- Patent Title: Detecting stack pivots using stack artifact verification
-
Application No.: US16210318Application Date: 2018-12-05
-
Publication No.: US11314855B2Publication Date: 2022-04-26
- Inventor: Ira Strawser
- Applicant: Webroot Inc.
- Applicant Address: US CO Broomfield
- Assignee: Webroot Inc.
- Current Assignee: Webroot Inc.
- Current Assignee Address: US CO Broomfield
- Agency: Sprinkle IP Law Group
- Main IPC: G06F21/54
- IPC: G06F21/54 ; G06F21/55 ; G06F21/56 ; G06F9/54

Abstract:
Examples of the present disclosure describe systems and methods for detecting and mitigating stack pivoting using stack artifact verification. In aspects, function hooks may be added to one or more functions. When a hooked function executes, artifacts relating to the hooked function may be left on the stack memory (“stack”). The location of the artifacts on the stack may be stored in a local storage area. Each time a hook in a hooked function is subsequently executed, protection may be executed to determine whether an artifact remains in the location stored in the local storage area. If the artifact is no longer in the same location, a stack pivot may be detected and one or more remedial actions may be automatically performed.
Public/Granted literature
- US20200184069A1 Detecting Stack Pivots Using Stack Artifact Verification Public/Granted day:2020-06-11
Information query