In-memory protection for controller security

A method for hardening network-accessible controllers through integrating a customized security layer, the method comprising:

• identifying computer-readable code configured to be run on a particular controller, wherein the computer-readable code is configured to be stored in a memory in a plurality of code portions, each code portion comprising one or more instructions to be performed by the particular controller;
• identifying contextual information associated with the particular controller;
• identifying a specific code portion from the plurality of code portions that is configured to be run on the particular controller;
• selecting, from a plurality of available flow control integrity (IMV) schemes, an IMV scheme based on the identified contextual information, wherein the selected IMV scheme specifies instructions for at least one of:
• function validation, or
• memory address verification;
• applying the selected IMV scheme to the identified specific code portion;
• and
• hardening the particular controller by enabling the specific code portion to run on the particular controller with the applied IMV scheme.

A non-transitory computer readable medium including instructions that, when executed by at least one processor, cause the at least one processor to perform operations for hardening network-accessible controllers through integrating a customized security layer, comprising:

• identifying computer-readable code configured to be run on a particular controller, wherein the computer-readable code is configured to be stored in a memory in a plurality of code portions, each code portion comprising one or more instructions to be performed by the particular controller;
• identifying contextual information associated with the particular controller;
• identifying a specific code portion from the plurality of code portions that is configured to be run on the particular controller;
• selecting, from a plurality of available flow control integrity (IMV) schemes, an IMV scheme based on the identified contextual information, wherein the selected IMV scheme specifies instructions for at least one of:
• function validation, or
• memory address verification;
• applying the selected IMV scheme to the identified specific code portion;
• and
• hardening the particular controller by enabling the specific code portion to run on the particular controller with the applied IMV scheme.