Executing process code integrity verificaton

A device, comprising:

• a processor;
• a memory coupled to the processor;
• a fingerprint processor, coupled to the processor and memory, the fingerprint processor, when operating, being configured to:
• compute, during a system startup phase that starts privileged software processes that initialize the device and that is prior to transitioning to a device operational phase wherein any software present on the device is able to execute, a respective starting fingerprint of memory of each executing process within at least one process other than a kernel process, each process in the at least one process being started after the kernel process and during the system startup phase;
• determine, during the device operational phase and while a selected executing process is executing, a present fingerprint of memory of the selected executing process where the selected executing process is within the at least one process;
• and
• determine a difference between the respective starting fingerprint of the selected executing process and the present fingerprint of the selected executing process;
• and
• a reporting processor that when operating, is configured to report, based on a determination of the difference, an indication of the difference for the selected executing process.

A non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising instructions executable by a processor to:

• compute, by a processor during a system startup phase that starts privileged software processes that initialize the device and that is prior to transitioning to a device operational phase wherein any software present on the device is able to execute, a respective starting fingerprint of memory of each executing process within at least one process other than a kernel process, each process in the at least one process being started after the kernel process and during the system startup phase;
• determine, by the processor during the device operational phase and while a selected executing process is executing, a present fingerprint of memory of the selected executing process where the selected executing process is within the at least one process;
• determine a difference between the respective starting fingerprint of the selected executing process and the present fingerprint of the selected executing process;
• and
• report, based on determining the difference, an indication of the difference for the selected executing process.