Method and apparatus for protection of a program against monitoring flow manipulation and against incorrect program running
AssigneeSiemens Aktiengesellschaft
InventorsBernd Meyer, Marcus Schafheutle, Hermann Seuschek
Life of this patent
Estimating the term…
Abstract
Protection program commands are inserted into at least one program command sequence of program commands in a program, to produce and check a monitoring flow marking sequence.
Claims17
1-17. (canceled)
A method of protecting a program against control flow manipulation, comprising:
- inserting protect program commands for generating and checking a control flow flag sequence into at least one program command sequence of program commands of the program;
- and
- forming a control flow flag of the control flow flag sequence by a command address of a program command.
An apparatus for protecting a program against control flow manipulation, comprising:
- a device automatically inserting protect program commands, generating and checking a control flow flag sequence, into at least one program command sequence of program commands of the program;
- and
- a device forming a control flow flag of the control flow flag sequence based on a command address of a program command.
A method of detecting incorrect program flow of a program, comprising:
- generating a control flow flag sequence during program flow of the program, a control flow flag of the control flow flag sequence being formed by a command address of a program command;
- and
- detecting incorrect program flow if the control flow flag sequence generated does not match a stored reference control flow flag sequence or if the control flow flag sequence generated is not contained in a set of stored reference control flow flag sequences.
An apparatus for detecting incorrect program flow of a program, comprising:
- a device generating a control flow flag sequence during a program flow of the program, a control flow flag of the control flow flag sequence being formed by a command address of a program command;
- and
- a device detecting an incorrect program flow of the program if the control flow flag sequence generated does not match a stored reference control flow flag sequence or if the control flow flag sequence generated is not contained in a set of stored reference control flow flag sequences.
A computer readable medium embodying a computer program protecting against control flow manipulation, comprising:
- inserting protect program commands provided for generating and checking a control flow flag sequence, a control flow flag of the control flow flag sequence being formed by a command address of a program command.
Dependencies are inferred from the claim text.