An in-process data isolation and protection method and system

Abstract

The invention relates to an in-process data isolation and protection method. The method comprises the steps that an application program is divided into a main function area and a library function area; a processor sets a PC range register, a data limit register and a library function return address register; when the processor executes a memory access instruction of a library function, whether a memory access address of the memory access instruction is in the range of the data limit register or not is judged; when in the range, the memory access instruction is continuously executed, otherwise,an illegal state is reported, and exception handling is carried out; when the processor executes a skip return instruction from the library function area to the main function area, if the destinationaddress of the skip return instruction is equal to the expected return address, the skip return instruction is continuously executed; otherwise, an illegal state is reported and abnormity processingis carrying out. According to the invention, the instruction overhead of security check software during running can be greatly reduced, and the security and execution efficiency of the application program are effectively improved.

Description

technical field [0001] The invention belongs to the field of computers, and relates to the direction of computer system structure, and in particular relates to a memory safety structure system realized by cooperation of software and hardware. Background technique [0002] Most of the data protection of traditional computer systems is based on the virtual memory mechanism. The mapping relationship (page table) between the virtual address and the process number is used for access rights management. But this kind of management is limited to address protection between processes, and cannot provide data isolation and protection functions within the same process. As the complexity of computer applications continues to increase, it is inevitable that the applications will call various third-party codes. However, it is difficult to guarantee the security and reliability of the third-party code, which poses a challenge to the data protection inside the process. [0003] How to pre...

AI Technical Summary

Problems solved by technology

And this is unrealistic for a large number of third-party codes from different sources, so it cannot completely solve the address protection problem in the process space proposed above

Images