A method of monitoring software business activity based on control flow coarseness integrity

A monitoring software, coarse-grained technology, applied in platform integrity maintenance, electrical digital data processing, instruments, etc., can solve problems such as large performance overhead, and achieve the effect of reducing impact

Inactive Publication Date: 2016-08-17
THE PLA INFORMATION ENG UNIV
View PDF3 Cites 11 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Although CFIMon uses hardware to collect program jump records generated when the software is running, because it collects all ju

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A method of monitoring software business activity based on control flow coarseness integrity
  • A method of monitoring software business activity based on control flow coarseness integrity
  • A method of monitoring software business activity based on control flow coarseness integrity

Examples

Experimental program
Comparison scheme
Effect test

Example Embodiment

[0049] First, the individual terms in the present invention are explained as follows:

[0050] Control flow coarse-grained integrity: refers to the software must follow a predetermined path of a certain subgraph of the control flow graph. The coarse-grained integrity of control flow is compared with the traditional concept of control flow integrity. It is a simplification of the control flow graph in some form. The software only needs to run along a path of the simplified control flow graph to meet the coarse-grained integrity of control flow. .

[0051] Software business behavior: refers to a series of actions performed by software in order to complete a certain business. The present invention does not focus on all behaviors of the software, but only a specific part of them. For example, if the user pays attention to whether the process of initializing software A according to the working parameters stored in the file is correct, then only needs to monitor software A to complete ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a method of monitoring software business activity based on control flow coarseness integrity. The method comprises a first step of a pretreatment process completed by a pretreatment module, the pretreatment process outputting executable files meeting systematic requirements with the source codes of programs as the input; a second step of an initialization process completed by an initialization module, the initialization process outputting processes mapped by monitored programs with the executable files of the monitored programs as the input; a third step of a training process completed by a judging module, the training process outputting reference values required for monitoring the programs with the track information generated during the operation of the programs as the input; a fourth step of a monitoring process completed by the judging module and a control module, the monitoring process outputting monitoring results with the track information generated during the operation of the programs and the relevant reference values as the input. The method can reduce the system performance overhead.

Description

Technical field [0001] The invention relates to a method for monitoring software business behaviors, in particular to a method for monitoring software business behaviors based on the coarse-grained integrity of control flow. Background technique [0002] The classic method of software behavior monitoring is sandbox (sometimes also called sandbox). The software runs in the sandbox, and the sandbox monitors the software's related behaviors, such as reading and writing files, network transmission, etc. Sandbox technology has also changed from the early simple sandbox to the use of hardware-assisted virtualization technology to build a sandbox that encompasses the entire operating system, which enables more accurate and detailed monitoring of software behavior. However, not all application software systems will be deployed to work in the sandbox. Sometimes, the sandbox is just an aid to software analysis. [0003] Since system calls reflect software behavior to a certain extent, and...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F21/53
CPCG06F21/53G06F2221/033
Inventor 周洪伟李福林韩继红原锦辉周雁舟关慧
Owner THE PLA INFORMATION ENG UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products