Memory management apparatus and method

By tracking virtual and physical address mappings in the address translation table, generating metadata, and intercepting update operations, the problem of malicious attacks is solved, achieving efficient memory management security and avoiding latency in the hypervisor.

CN115516438BActive Publication Date: 2026-07-10HUAWEI TECH CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202080100609.X
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2020-05-15
Publication Date
2026-07-10
Estimated Expiration
2040-05-15

AI Technical Summary

Technical Problem

In existing technologies, malicious users may circumvent memory page protection by updating the address translation table or disabling the MMU, leading to security issues. Furthermore, protection schemes based on hypervisors suffer from latency problems.

Method used

By tracking the virtual and physical address mappings in the address translation table, metadata is generated, update operations are intercepted, the existence of the mapping is checked, and a decision is made on whether to perform the update to prevent malicious attacks.

Benefits of technology

Provides similar or higher levels of security, preventing malicious attacks on address translation tables without introducing latency in the hypervisor.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN115516438B_ABST
    Figure CN115516438B_ABST
Patent Text Reader

Abstract

The invention relates to a memory management apparatus and method for providing virtual-to-physical address translations in a protected manner. The memory management apparatus and method tracks virtual addresses and physical addresses having mappings in an address translation table and generates metadata distinguishing between virtual addresses and physical addresses having and not having the mappings in the address translation table. Subsequently, upon intercepting a request to create a new mapping in the address translation table, the metadata is used to check the virtual address and physical address corresponding to the new mapping. If the virtual address and physical address corresponding to the new mapping do not have any other mappings in the address translation table, a decision is made to create the new mapping. In this way, malicious attacks on the address translation table, such as malicious attacks targeting double mappings, can be detected and prevented.
Need to check novelty before this filing date? Find Prior Art

Citation Information

Patent Citations

  • Controlling Access to Pages in a Memory in a Computing Device

    US20180032447A1

  • Detecting malicious software by inspecting table look-aside buffers

    US20190180031A1