Detecting a heap spray attack
US9548990B2 · kind B2 · utility
2Cited by
1References
42Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Oct 26, 2015 |
| Grant date | Jan 17, 2017 |
| Priority date | — |
| Expiry date | Oct 26, 2035 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F21/566
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
Various techniques for exploit detection based on heap spray detection are disclosed. In some embodiments, exploit detection based on heap spray detection includes executing a program in a virtual environment, monitoring a heap of a memory while executing the program in the virtual environment, and detecting a potential heap spray attack based on detecting a burst allocation of a first plurality of blocks in the heap of the memory, in which each of the first plurality of blocks is stored in the predefined address range of the memory.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.