Memory management apparatus and method
By tracking virtual and physical address mappings in the address translation table, generating metadata, and intercepting update operations, the problem of malicious attacks is solved, achieving efficient memory management security and avoiding latency in the hypervisor.
CN115516438BActive Publication Date: 2026-07-10HUAWEI TECH CO LTD
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- HUAWEI TECH CO LTD
- Filing Date
- 2020-05-15
- Publication Date
- 2026-07-10
AI Technical Summary
Technical Problem
In existing technologies, malicious users may circumvent memory page protection by updating the address translation table or disabling the MMU, leading to security issues. Furthermore, protection schemes based on hypervisors suffer from latency problems.
Method used
By tracking the virtual and physical address mappings in the address translation table, metadata is generated, update operations are intercepted, the existence of the mapping is checked, and a decision is made on whether to perform the update to prevent malicious attacks.
Benefits of technology
Provides similar or higher levels of security, preventing malicious attacks on address translation tables without introducing latency in the hypervisor.
✦ Generated by Eureka AI based on patent content.
Smart Images
Figure CN115516438B_ABST
Abstract
The invention relates to a memory management apparatus and method for providing virtual-to-physical address translations in a protected manner. The memory management apparatus and method tracks virtual addresses and physical addresses having mappings in an address translation table and generates metadata distinguishing between virtual addresses and physical addresses having and not having the mappings in the address translation table. Subsequently, upon intercepting a request to create a new mapping in the address translation table, the metadata is used to check the virtual address and physical address corresponding to the new mapping. If the virtual address and physical address corresponding to the new mapping do not have any other mappings in the address translation table, a decision is made to create the new mapping. In this way, malicious attacks on the address translation table, such as malicious attacks targeting double mappings, can be detected and prevented.
Need to check novelty before this filing date? Find Prior Art