Method and system for recording memory access source

Abstract

The embodiment of the invention discloses a method and system for recording a memory access source, and relates to the technical field of computers.The method comprises the steps that when a memory read-write execution module used for executing a memory access instruction receives the memory access instruction, the memory access source is recorded; judging whether a target memory address to be accessed by the memory access instruction belongs to a preset monitoring memory address range or not; if the target memory address belongs to a preset monitoring memory address range, the memory read-write execution module executes the memory access instruction, and records memory access information through a memory access record cache module arranged in a CPU physical core; and the memory access record caching module writes the recorded memory access information back into a main memory buffer region corresponding to a preset computer main memory address range according to a recording time sequence. According to the invention, the range of the memory address which can be recorded is expanded, and the system performance is basically not influenced.

Description

technical field [0001] The invention relates to the technical field of computers, in particular to a method and system for recording memory access sources. Background technique [0002] In a computer system, memory is an important component. All the data of a computer program during operation is stored in memory. Stealing data in memory is the most common means and goal of hacking programs, and recording and monitoring memory access sources is an effective means to track hacking programs. [0003] Currently, there are three common schemes for recording memory access sources: [0004] The first option is to set hardware breakpoints. The hardware debug register under X86 hardware supports triggering exceptions for reading and writing memory. DR0-DR7 debug registers are defined under X86 hardware. DR0–DR3 record the memory addresses to be debugged, and DR7 manages and configures debugging conditions. Fill the memory virtual address into the registers DR0–DR3, and configur...

AI Technical Summary

Problems solved by technology

[0010] In view of this, the embodiments of the present invention provide a method and system for recording memory access sources, which can solve the existing solutions for recording memory access sources. The recorded memory addresses are limited, which affects system performance and is vulnerable to attacks that cause the system to fail to work normally. The problem

Images