Processor trace-based enforcement of control flow integrity of a computer system

A computer processing node configured to perform a control flow integrity (CFI) method, the computer processing node comprising:

• a processing hardware;
• and
• a non-transitory computer readable medium including computer-executable instructions that, when executed by the processing hardware, facilitate the computer processing node to carry out the CFI method comprising:
• intercepting a system call originating from execution of the protected process executing in the runtime environment;
• accessing from a kernel memory, by a fast path within a kernel of the computer system, a processor trace packet corresponding to the system call;
• matching, by the fast path, the processor trace packet to a program control flow entry, within a credit-labeled control flow graph (CFG) definition, having an associated credit value that represents a degree to which a program control flow, represented by the program control flow entry, is credible;
• and
• invoking, after the matching, a slow path for further processing of the processor trace packet if the associated credit value does not meet a specified threshold, and otherwise providing an indication to permit execution of the system call,
• wherein the associated credit value is determined by a dynamic fuzzing analysis operation performed on the protected process during a configuration procedure for rendering the CFG.