Detecting a heap spray attack
US9202054B1 · kind B1 · utility
20Cited by
1References
16Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Jun 11, 2014 |
| Grant date | Dec 1, 2015 |
| Priority date | — |
| Expiry date | Jun 11, 2034 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F21/566
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
Various techniques for exploit detection based on heap spray detection are disclosed. In some embodiments, exploit detection based on heap spray detection includes executing a program in a virtual environment, monitoring a heap of a memory while executing the program in the virtual environment, and detecting a potential heap spray attack based on detecting a burst allocation of a first plurality of blocks in the heap of the memory, in which each of the first plurality of blocks is stored in the predefined address range of the memory.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.