Invention Grant
US09015834B2 Mitigating just-in-time spraying attacks in a network environment 有权
缓解在网络环境中的即时喷涂攻击

Mitigating just-in-time spraying attacks in a network environment
Abstract:
An example method for mitigating JIT spraying attacks in a network environment is provided and includes protecting an output of a just-in-time (JIT) compiler against attacks during application execution at least by intervening from outside the application into a JIT page generated by the JIT compiler in a memory element of a host. In a specific embodiment, the intervening can include rewriting the JIT page. In specific embodiments, the method can further include generating a shadow page corresponding to the JIT page in the memory element. The method can further include randomly choosing at least one block of instructions in the JIT page, moving the at least one block of instructions to the shadow page, and replacing the at least one block of instructions in the JIT page with at least one of invalid opcodes and halt instructions.
Public/Granted literature
Information query
Patent Agency Ranking
0/0