Apparatus and method for injecting control flow integrity security code based on location
AssigneeElectronics and Telecommunications Research Institute
InventorsGae-Il An, Dong-Wook Kang, Hong-Il Ju
Life of this patent
Estimating the term…
Abstract
Disclosed herein are an apparatus and method for injecting control flow integrity security code based on a location. The apparatus identifies an indirect function call in input program code, generates indirect function call location information by analyzing the identified indirect function call, and injects control flow integrity security code into the program code using the generated indirect function call location information.
Claims12
An apparatus for injecting control flow integrity security code based on a location, comprising:
- one or more processors;
- and
- executable memory for storing at least one program executed by the one or more processors,
- wherein the at least one program
- identifies an indirect function call in input program code,
- generates indirect function call location information by analyzing the identified indirect function call, and
- injects the control flow integrity security code into the program code using the generated indirect function call location information;
- wherein the at least one program generates a new control flow integrity identifier and injects the control flow integrity setting security code at a block location of a target function setting instruction using the new control flow integrity identifier when block locations of an indirect function call instruction and the target function setting instruction differ from each other in the program code.
A method for injecting control flow integrity security code based on a location, performed by an apparatus for injecting the control flow integrity security code based on the location, comprising:
- identifying an indirect function call in input program code;
- generating indirect function call location information by analyzing the identified indirect function call;
- and
- injecting the control flow integrity security code into the program code using the generated indirect function call location information;
- wherein injecting the control flow integrity security code comprises generating a new control flow integrity identifier and injecting the control flow integrity setting security code at a block location of a target function setting instruction using the new control flow integrity identifier when block locations of an indirect function call instruction and the target function setting instruction differ from each other in the program code.
Dependencies are inferred from the claim text.