Injecting trap code in an execution path of a process executing a program to generate a trap address range to detect potential malicious code

    公开(公告)号:GB2586409B

    公开(公告)日:2021-07-14

    申请号:GB202016053

    申请日:2019-03-06

    Applicant: IBM

    Abstract: Provided are a computer program product, system, and method for injecting trap code in an execution path of a process executing a program to generate a trap address range to detect potential malicious code. A specified type of command is processed in application code and, in response, trap code is executed to allocate a trap address range. The specified type of command is executed in the application code. A determination is made as to whether an accessing application accesses the trap address range. At least one of transmitting a notification that the accessing application comprises potentially malicious code, monitoring the execution of the accessing application, and restricting execution of the accessing application is performed in response to determining that the accessing application accessed the trap address range.

    Injecting trap code in an execution path or a process executing a program to generate a trap address range to detect potential malicious code

    公开(公告)号:GB2586409A

    公开(公告)日:2021-02-17

    申请号:GB202016053

    申请日:2019-03-06

    Applicant: IBM

    Abstract: Provided area computer program product, system, and method for injecting trap code in an execution path of a process executing a program to generate a trap address range to detect potential malicious code. A specified type of command is processed in application code and, in response, trap code is executed to allocate a trap address range. The specified type of command is executed in the application code. A determination is made as to whether an accessing application accesses the trap address range. At least one of transmitting a notification that the accessing application comprises potentially malicious code, monitoring the execution of the accessing application, and restricting execution of the accessing application is performed in response to determining that the accessing application accessed the trap address range.

Patent Agency Ranking