公开(公告)号：US20230025760A1

公开(公告)日：2023-01-26

申请号：US17385902

申请日：2021-07-26

Applicant: CrowdStrike, Inc.

Inventor： Alexander Nip ,  Milos Petrbok

IPC: G06F9/52 ,  G06F9/50

Abstract: Methods and systems for implementing division of process resources of running processes into individually locked partitions, and indirect mapping of keys to process resources to locks of each partition, are provided. In computing systems implementing concurrent processing, applications may generate and destroy concurrently running processes with high frequency. Real-time security monitoring may cause the computing system to run monitoring processes collecting large volumes of data regarding system events occurring in context of various other processes, causing threads of processes of the security monitoring application to make frequent write access and read access to resources of those processes in memory. Indirect mapping of lock acquisition across locks provides scalable alleviation of lock contention and thread blocking that result from computational concurrency, while handling read and write requests which arise at unpredictable times from kernel-space monitoring processes, and which request unpredictable resources of monitored user-space processes.