Method and system for monitoring program execution path on basis of deep learning

A deep learning and program execution technology, applied in the direction of platform integrity maintenance, etc., can solve the problems of combination explosion, complicated calling relationship, manual analysis consumes a lot of time and energy, etc., to achieve the effect of saving labor costs

Active Publication Date: 2015-06-17
INST OF COMPUTING TECH CHINESE ACAD OF SCI
View PDF10 Cites 7 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] Under the background of the increasing complexity of the underlying system today, the calling relationship between various platforms and the platform itself is intricate, and under the guidance of the modular programming idea, the high cohesion and low couplin

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and system for monitoring program execution path on basis of deep learning
  • Method and system for monitoring program execution path on basis of deep learning
  • Method and system for monitoring program execution path on basis of deep learning

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0038] Concrete steps of the present invention, such as figure 1 Shown:

[0039] Inserting a detection point into a function in the program, obtaining a return address of the function when it is running, and querying the function address of the function backtracking through the stack pointer;

[0040] Obtain the function address range of all functions in the user layer and / system layer, compare the function address with the function address space, and obtain the function name corresponding to the function address;

[0041] Encapsulating the function name and the return address;

[0042] According to the return address, the function address space, and the function name, obtain the calling path of the function in the program in the user layer and / or the system layer, wherein each process is obtained from the The user layer and / or the system layer call the call path of all the functions to the detection point;

[0043] Repeating the above steps to obtain the calling paths of a...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a method and system for monitoring a program execution path on the basis of deep learning, and relates to the technical field of computer security. The method includes the steps of firstly, inserting detecting points for functions in a program, obtaining the return addresses of the functions during running, and tracing back to find function addresses of the functions through a stacker pointer; secondly, obtaining function address intervals of all functions in a user layer and/or a system layer, comparing the function addresses with a function address space, and obtaining function names corresponding to the function addresses; thirdly, obtaining the calling path of the functions in the program in the user layer and/or the system layer according to the return addresses, the function address space and the function names; fourthly, deeply learning the program, obtaining the calling features of the functions in the program, generating a calling feature library, and comparing the calling path with the calling feature library so as to complete the monitoring of the program execution path.

Description

technical field [0001] The invention relates to malicious behavior monitoring during program running, and to the technical field of computer security, in particular to a method and system for monitoring program execution paths based on deep learning. Background technique [0002] In recent years, because of its clear business model, cloud computing has been widely concerned and generally recognized by the industry and academia, and has become one of the most concerned IT technologies. With the rapid development of cloud computing, the rapid growth and diversification of requirements has become an inevitable trend, which also makes the scale of data centers larger and larger, and the infrastructure is increasingly complex and diverse. The complexity of the current underlying platform has increased dramatically. While bringing convenience and efficiency, it also poses a great challenge to the security of cloud platform infrastructure including system software. [0003] Althou...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F21/52G06F21/56
Inventor 马引孙毓忠
Owner INST OF COMPUTING TECH CHINESE ACAD OF SCI
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap