Data protection method and computing device

Abstract

The invention discloses a method for protecting specific data accessed by a central processing unit (CPU), relates to an information technology, in particular to the field of information security, andparticularly relates to a method for protecting a transfer instruction return address, which adopts a field information stack to store data generated by operations needing field protection, such as calling, interrupting and the like; an ass register and an aesp register are added and are respectively used for storing a segment selector of the field information stack and a stack top pointer of thefield information stack; a pushadr and a pushadr instruction are added, the pushadr instruction is used for pressing an address into the field information stack, and the aesp automatically points toa new stack top; the popadr instruction is used for popping up an address from the field information stack, and the aesp automatically points to a new stack top. By applying the scheme provided by theinvention, the condition that a new execution sequence can be generated in a program to further generate an attack due to the fact that a return value of function calling or an address value returnedby interruption is covered is avoided.

Description

technical field [0001] This application relates to the field of information technology, in particular to a data protection technology, especially to a specific data accessed by the CPU or to a technology for automatically saving data in memory by the CPU to prevent data from being tampered with, especially a protection technology involving return addresses . Background technique [0002] In the prior art, the function call instruction will push the address to be returned after the call is completed onto the stack, so that the function call can return to the original execution sequence. One attack method is to overwrite the address of the function pushed into the stack by means of stack overflow and write it into another address, so that the code will jump to the address written by the attack program when it returns, and the attack program will reach The purpose of changing the program execution order. [0003] In addition to function calls, information including the return...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the problem in the prior art that an attacker can modify the return address stored in the stack to trigger an execution sequence that is conducive to the attack, and then obtain beyond authorization, the present invention discloses a method for preventing the generation of a new execution sequence, preventing the generation of Techniques that perform sequences other than those intended by design

Images