Program execution integrity verification for a computer system
AssigneeGeorge Mason Intellectual Properties, Inc.
InventorXinyuan Wang
Life of this patent
Estimating the term…
Abstract
A computer system may be employed to verify program execution integrity by receiving a request to launch a program that has been instrumented to include at least one integrity marker, instantiating the program with an integrity marker value, and verifying the execution integrity of the program based on the integrity marker value and information received from the program during execution. A computer system may also be employed for program instrumentation by modifying the program to include at least one instruction for passing an integrity marker value to an operating system kernel during execution of the instruction.
Claims16
A method of verifying program execution integrity employing a computer system including at least one processor configured to execute an operating system kernel, the method comprising:
- the computer system receiving a request to launch a program that has been instrumented to include at least one integrity marker that is independent of other portions of the program;
- the computer system using the kernel, and not a compiler outside of the kernel, to instantiate the program with a unique and dynamically generated integrity marker value;
- and
- the computer system verifying the execution integrity of the program based on the unique and dynamically generated integrity marker value and information received from the program during execution.
An apparatus for verifying program execution integrity, the apparatus comprising:
- at least one processor configured to:
- execute an operating system kernel,
- receive a request to launch a program that has been instrumented to include at least one integrity marker that is independent of other portions of the program,
- use the kernel, and not a compiler outside of the kernel, to instantiate the program with a unique and dynamically generated integrity marker value, and
- verify the execution integrity of the program based on the integrity marker value and information received from the program during execution;
- and
- at least one non-transitory storage medium coupled to the at least one processor and configured to store the program.
Dependencies are inferred from the claim text.