US 2018/0121648 A1 · DETECTION OF OBJECT CREATION

Abstract

Examples disclosed herein relate to detecting object creation when instrumenting an application for security purposes. The examples enable determining, by an instrumenter implemented by a physical processor that implements machine readable instructions, whether to instrument a function; responsive to determining that the function should be instrumented, determining, by the instrumenter, that a base class constructor is to be called by the function; before the base class constructor is called, pushing, by the instrumenter, object related information onto a local storage registry; analyzing, by the instrumenter, the local storage registry to determine whether an object associated with the function was created based on information in the local storage registry; and responsive to determining that the object was created, applying, by the instrumenter, a security rule to the function.

Claims20

Dependent claims

A method for detection of object creation, the method comprising:

determining, by an instrumenter implemented by a physical processor that implements machine readable instructions, whether to instrument a function;
responsive to determining that the function should be instrumented, determining, by the instrumenter, that a base class constructor is to be called by the function;
before the base class constructor is called, pushing, by the instrumenter, object related information onto a local storage registry;
analyzing, by the instrumenter, the local storage registry to determine whether an object associated with the function was created based on information in the local storage registry;
responsive to determining that the object was created, applying, by the instrumenter, a security rule to the function.

2 more elements

A non-transitory machine-readable storage medium comprising instructions executable by a processor of a computing device for detection of object creation, the machine-readable storage medium comprising:

instructions to determine whether to instrument a function;
instructions to, responsive to a determination that the function should be instrumented, determine that a base class constructor is to be called;
instructions to, before the base class constructor is called, push object related information onto a local storage registry;
instructions to analyze the stack to determine whether an object associated with the function was created based on information in the local storage registry;
instructions to, responsive to a determination that the object was created, apply a security rule to the function, wherein the security rule is associated with the object associated with the function.

2 more elements

A system for detection of object creation comprising:

a hardware processor that implements machine readable instructions to cause the system to:
determine whether to instrument a function based on a security rule;
responsive to a determination that the function should be instrumented, determine that a base class constructor is to be called;
before the base class constructor is called, push object related information onto a thread-local stack;
analyze the thread-local stack to determine whether an object associated with the function was created based on information in the local storage registry;
responsive to a determination that the object was created, apply the security rule to the function, wherein the security rule is associated with the object associated with the function.

3 more elements

Dependencies are inferred from the claim text.

Detection of object creation

Life of this patent

Detection of object creation

Life of this patent

Abstract

Claims20