48 results about "Memory safety" patented technology

The present disclosure provides a method for analyzing exploitability of memory safety vulnerabilities in binary programs. The method includes identifying potential vulnerabilities within a binary program, performing a baseline analysis to detect potential Return-Oriented Programming (ROP) chains, applying a memory safety mitigation technology to the binary program, performing a protected analysis after applying the memory safety mitigation technology to detect potential ROP chains, comparing results of the baseline analysis and the protected analysis, and generating a report quantifying an impact of the memory safety mitigation technology on exploitability of the identified vulnerabilities. The method enables assessment of the effectiveness of memory safety mitigation techniques in reducing the risk of exploitation, providing valuable insights for improving software security throughout the development lifecycle.

The invention relates to a software and hardware combined fine-grained memory protection mechanism, which realizes high-speed mapping from a physical address to a fine-grained permission label by integrating a metadata search unit and a metadata conversion lookup buffer on a critical path of a processor loading / storage unit. An operating system maintains a multi-level fine-grained permission metadata table in a main memory, and the minimum memory protection granularity is refined to a 64-byte sub-page level. When a processor executes a memory access instruction, address conversion and permission verification are completed in parallel, an access type and a permission label are compared in real time within 1-2 clock periods, and when permission conflicts are detected, high-priority abnormity is triggered immediately, and illegal addresses and fault types are reported accurately. The method supports instruction set extension, buffer overflow protection, multi-level metadata management and user mode and kernel mode differentiated authority control, reduces the influence on the performance of the processor while improving the security of the memory, and is suitable for a computing system with high security and high performance.

The embodiment of the invention discloses a memory security self-checking circuit and method, a chip and a memory security circuit. The memory security self-checking circuit comprises a random number generator, a random address generation module, a first address output selector, a first memory, a second memory, a self-checking module and a decryption circuit, the output end of the random number generator is connected with the first input end of the random address generation module, and the output end of the random address generation module is connected with the first input end of the first address output selector; the output end of the first address output selector is connected with the input end of the first memory and the input end of the second memory; the output end of the first memory is connected with the input end of the self-checking module, and the output end of the self-checking module is used for providing a result flag bit obtained by checking the self-checking data for the control circuit; the output end of the second memory is connected with the input end of the decryption circuit. The security of the chip is improved, and important programs and data related to the chip are protected.

The invention relates to the technical field of underlying software of a computer system, in particular to an interrupt controller driving method based on a rust language, which comprises the steps of unified hardware abstract interface, strong type interrupt number management, thread safe interrupt distribution, multi-version GIC automatic identification, virtual interrupt mapping, multi-core load balancing and virtualization support. According to the method, a memory security mechanism and a type system of a Rust language are utilized, unified, safe and efficient driving of GICv2 / v3 / v4 under an Arm64 architecture is achieved, memory security defects in traditional C language driving are effectively eliminated, and system reliability and performance under a multi-core and virtualization scene are improved.

The application discloses a memory management method and device, relates to the technical field of heterogeneous computing, and comprises the following steps: obtaining a memory allocation request of a device, and searching for a page-locked memory block corresponding to the memory allocation request to allocate the memory block to the corresponding device; receiving a request for releasing the memory block, identifying a device computing flow associated with the memory block, and recording a synchronization event for each computing flow; storing the recorded synchronization event and metadata of the memory block in a to-be-processed event queue; querying whether an event in the to-be-processed event queue is completed; and when it is queried that a specific event is completed, recycling the corresponding memory block to an idle memory pool, so that the technical problem that in the related art, high-cost memory management function calls are too frequent, performance is low, and it is difficult to cooperate with device asynchronous operation, and data competition and errors are easily caused is solved, and the technical effect that the efficiency of memory allocation and the overall throughput of a system are greatly improved under the premise of ensuring memory safety is achieved.

A hardware revocation engine for invalidating a pointer, that refers to a deallocated object, from memory in a memory constrained system. The hardware revocation engine has a revocation pipeline coupled to a pipeline of a main processor of the memory constrained system. The revocation pipeline shares access to memory with the main pipeline, the revocation pipeline comprising at least a first stage and a subsequent second stage. In a first cycle of the revocation pipeline, the first stage of the revocation pipeline loads a first pointer-sized value from the memory. In a second cycle: the second stage checks whether the first loaded pointer-sized value is a pointer referring to deallocated memory. In a third cycle: in response to the outcome of the check indicating that the first loaded pointer-sized value is a pointer referring to deallocated memory, the first stage invalidates the first pointer-sized value.

This invention relates to a hybrid Rust, C, and assembly code construction method based on an embedded operating system, belonging to the field of embedded operating systems. This invention utilizes Rust's External Function Interface (FFI) and the "staticlib" and "rlib" code classes supported by the Rust compiler to align the Rust library API with the APIs of the C and assembly libraries in the embedded operating system. This aligns the Rust code with the relocatable files that can be recognized by the embedded operating system, guiding the build system to link the Rust library with the C and assembly libraries to form the final embedded operating system executable file. This invention can link Rust components with C and assembly components to form a single executable file, fully utilizing Rust's type safety and memory safety features to improve the overall security and reliability of the system, while also considering the reuse and expansion of existing code libraries.

Each memory location of a main memory (140) is associated with a respective tag bit indicating whether a respective value stored at the respective memory location is a pointer. A revocation entity (135) invalidates one or more pointers referring to one or more deallocated objects in the main memory. The revocation entity is arranged between a memory interconnect (130) and the main memory, and implements a revocation operation, comprising loading a value from a current memory location of the main memory, and overwriting the tag bit associated with the current memory location of the main memory, if the loaded value is a pointer referring to a deallocated object. The revocation entity detects store operations of a main processor (120) to the main memory and aborts the revocation operation, if during the revocation operation a store operation to the current memory location of the main memory is detected.

The application provides a hardware memory access control method, a software isolation domain construction method and equipment, and relates to the technical field of computer architecture and memory security. The method comprises the following steps: configuring a bit identifier for a memory page; configuring a running state bit identifier in a processor, wherein the running state bit identifier represents the authority level of a current execution context; when the processor executes a memory access operation, the hardware checks the relationship between the running state bit identifier and the bit identifier of a target memory page according to a preset lattice order rule to obtain a checking result; and when the checking result indicates that the authority of the running state bit identifier is higher than the authority of the bit identifier of the target memory page, the processor is allowed to access the target memory. Through real-time checking of the authority identifier based on the lattice order relationship by the hardware, efficient and scalable fine-grained memory access control is achieved.

The application relates to a method for performing memory safety dynamic analysis on a program containing specific sentences. The method comprises the following steps: selecting a project directory or a single source code file to be instrumented; preprocessing the source code, replacing macro calls with the content in the macro definition, and commenting out the original macro call; generating a symbol table and an abstract syntax tree of the source code by using a compiler; traversing all nodes in the abstract syntax tree, performing static analysis on the source code, and modifying the source code for sentences that cannot be processed, and then re-instrumenting the source code; traversing all nodes in the abstract syntax tree, performing different instrumentations on the source code according to different node types, compiling the instrumented project directory or file by using a compiler, generating an executable file on a target system, and running the executable file, performing memory error detection on the program containing specific sentences, and reporting the position of the source code corresponding to the error. The method avoids the problems of instrumentation failure and the failure of correctly compiling the program after instrumentation.

The application relates to the technical field of memory management, in particular to a memory safety management device and method of an operating system. The device comprises a memory management module, a data safety module, an authority management module, a log system module and an exception processing module; when the memory management module allocates memory for a program, space record information is simultaneously allocated, including data verification information; after writing data is completed, the data safety module verifies the data of the whole memory to generate a unique signature of the data, and writes the signature into the data verification information; when accessing the memory data, the data safety module generates a unique signature of the memory data and compares the signature with the signature in the data verification information; if the signatures are consistent, the memory access can be normally carried out; if the signatures are inconsistent, the memory access is terminated, and the exception processing module is informed. The application can avoid abnormal memory access, solve the hidden danger of memory protection, avoid memory out-of-bound access and improve the safety of memory protection.

The application discloses a program verification metadata export method and device and a deterministic execution environment, and belongs to the field of compiling technology and formal verification. The method comprises the following steps: marking the pointer ownership state in the source code through attribute annotation; extracting the ownership conversion information and generating the structured metadata during compiling; and outputting the metadata to the special section of the compiling product, so that the memory safety of the program can be verified independently by directly reading the metadata by an external system. In order to make the exported metadata complete and inferable, a deterministic running environment composed of zero global state context, full-link memory management, capability token and deterministic execution suite is provided. In the application, specific attribute annotations in the source code are identified during the compiling process, the pointer ownership state conversion information and the function formal contract are generated into the structured metadata with a predefined binary format, and are written into the special metadata section of the target file (such as an ELF). In this way, the processing of the internal semantics of the program is changed from being internally digested and reformed by the compiler to being actively and standardized output to the external system, so that the technical obstacle that the program semantics information cannot be directly and reliably acquired by the external AI or verification tool is solved.

The invention discloses a lightweight pointer security method for preventing a wild pointer by embedded software and a corresponding system, which are used for solving the problems of complex prevention and high overhead of the wild pointer in the prior art. The invention discloses a lightweight pointer safety method for preventing a wild pointer of embedded software. The method comprises the following steps: initializing a pointer registry when the embedded software is started; the pointer registry is used for storing a security pointer registry structural body, and the security pointer registry structural body comprises a 4-byte original pointer, a 1-byte pointer state and a 1-byte pointer permission; according to the pointer application, judging whether an unoccupied position exists in the pointer registry or not; if yes, allocating a memory, recording in the pointer registry, and meanwhile, returning a security pointer structure containing a 4-byte original pointer and a 2-byte registry index position; otherwise, returning an invalid security pointer structure. According to the lightweight solution for preventing the wild pointer in the embedded communication system, efficient memory security management is realized through pointer packaging and a registry mechanism.

The present disclosure provides a physical memory protection method, an electronic device, a computer readable medium and a computer program product. The method is applied to an MMU lookup unit. In an address conversion process, a page table mapping granularity determined by a page table check and a security protection granularity determined by a security check are obtained. In response to the security protection granularity being smaller than the page table mapping granularity, a first valid page size is set as the security protection granularity, and a downgrade flag is generated. A first address mapping relationship including the downgrade flag is generated, and the first address mapping relationship is stored in an MMU storage unit. The downgrade flag is used to trigger a security check on a memory access request based on the security protection granularity when the memory access request hits an entry with the downgrade flag in the MMU storage unit. In the embodiment of the present disclosure, the physical address interval involved in each memory access can be subjected to a security check, eliminating the protection blind area caused by the mismatch of the granularity, and enhancing the memory security of the system.

This invention proposes a hardware-assisted isolated execution method for eBPF programs, comprising: acquiring the eBPF program to be executed; setting all data pages accessed in the eBPF program to non-privileged pages; issuing all memory access instructions in the eBPF program as non-privileged access instructions through just-in-time (JIT) compilation to obtain the program to be executed; running the program to be executed in kernel mode EL1 of the server operating system to obtain the execution result; and during the execution of the program to be executed, the non-memory access instructions in the program to be executed run at the kernel mode EL1 privilege level, and the memory access instructions in the program to be executed are non-privileged access instructions, which are run at the user mode EL0 non-privileged level. By setting the memory of the eBPF program to non-privileged pages, the eBPF program still runs at a privileged level, but is issued with non-privileged memory access instructions. Since the kernel memory is set to privileged pages, the eBPF program cannot access them, thereby ensuring kernel memory safety.

The embodiment of the invention discloses a memory management method and device which are used for improving the memory utilization efficiency of a cloud platform. The method comprises the steps that the computing device receives a memory management request sent by a first entity, the memory management request is used for managing a secure memory, the secure memory is a memory area allocated to the trusted execution environment, and the first entity comprises a secure application program or a secure side part of the application program. And determining an idle secure memory based on the memory management request, the idle secure memory for expanding a memory space of a non-secure memory, the non-secure memory comprising a memory region allocated to a second entity for access, the second entity comprising a non-secure application or a non-secure side portion of the application. And responding to a memory access request corresponding to the second entity based on the idle secure memory.

The present application relates to the technical field of memory protection, and discloses a memory safety protection system and method, a computer device, and a storage medium. The system comprises: a baseboard management controller, memory modules, and a memory cooling fan; each memory module comprises a plurality of memory units, and each memory unit comprises a power management circuit; the power management circuits are used for collecting memory state information of the memory units, and uploading the memory state information to the baseboard management controller; the baseboard management controller is used for receiving the memory state information uploaded by the power management circuits in the memory units, determining a target fan rotating speed control instruction on the basis of the memory state information, and sending the target fan rotating speed control instruction to the memory cooling fan; and the memory cooling fan is used for receiving the target fan rotating speed control instruction, and performing rotating speed adjustment according to the target fan rotating speed control instruction. By sending a command by means of a baseboard management controller, the present application guarantees memory safety and improves the stability of the whole server.

The application relates to the technical field of security vulnerability analysis, and discloses a source code level memory security vulnerability static analysis method and system based on a Rust ownership model, which comprises the following steps: calling a rustc compiler to compile Rust source code to be detected, obtaining a target MIR and constructing an ownership state table; determining a variable moving point record table according to the ownership state table; extracting a borrowing relationship chain table and judging whether a borrowing record group of a same borrower exists a borrowing type conflict, obtaining a borrowing conflict vulnerability set; finding a destructor position of a borrowed variable, judging a sequence relationship between a borrowing termination position in the borrowing relationship chain table and the destructor position, obtaining a life cycle out-of-bound vulnerability set and a memory release vulnerability set, and generating a diagnosis report; and the application is completed in a compilation period, does not depend on runtime plugging, and covers all reachable paths by traversing a control flow graph, so that the false negative problem that a dynamic detection cannot cover unexecuted paths is solved.

The invention discloses a memory security management method and device. The memory security management method comprises the following steps: receiving a memory access request from an access subject, wherein the memory access request carries a physical address for accessing a memory area; searching a security permission table entry corresponding to the physical address by adopting a multi-stage segment table; when the security permission table entry exists, performing permission verification on the memory access request based on the security permission table entry to obtain a verification result; and if the verification result is that the access main body is matched with the memory area, allowing the access main body to access the memory area, and if the verification result is that the access main body is not matched with the memory area, refusing the access main body to access the memory area. According to the method and the device, the security permission table entry is searched by utilizing the multi-stage segment table and the physical address, and the permission check is performed based on the security permission table entry, so that centralized permission check based on the physical address is realized, the search times and the calculation overhead are reduced, and the memory access efficiency is improved.

The invention discloses an automatic monitoring data uploading system and method in automatic driving and a medium, and relates to the technical field of automatic driving, the system comprises a trigger judgment module, a data transmission module, a memory security monitoring module and a cloud service module; the trigger judgment module executes main path judgment based on functional logic and redundant path judgment based on a physical boundary in parallel, and generates a trigger signal when a risk is identified; the data transmission module locks data before and after a triggering moment to generate a monitoring file, cuts the file into fragments, and cooperates with a local database to establish a transmission channel to execute concurrent uploading; the memory security monitoring module monitors the memory occupancy rate in real time, and executes a blocking protection strategy by pausing writing and forced unloading when the memory occupancy rate reaches a threshold value; and the cloud service module receives the fragments and reconstructs the file. According to the invention, the problem of data loss caused by failure of a single controller and memory overflow is solved, and dual redundancy triggering and secure transmission of monitoring data are realized.

This invention discloses a method for enhancing WebAssembly memory safety based on the LLVM compilation framework. This method extends the WebAssembly instruction set so that the address format of instructions related to memory read / write includes the memory read / write range (base and size) and additional metadata (attr). A modified LLVM compiler backend compiles the LLVM IR into a wasm file corresponding to the extended WebAssembly instruction set. The wasm file runs on an adapted WebAssembly virtual machine. When the virtual machine needs to interpret or compile memory read / write related instructions in WebAssembly, it can obtain runtime security check metadata to check for memory access errors such as out-of-bounds access, thus improving the memory safety of WebAssembly. This invention compiles the extended instruction set WebAssembly file based on the LLVM compilation framework, thereby improving runtime memory safety.

The present disclosure provides a method for analyzing exploitability of memory safety vulnerabilities in binary programs. The method includes identifying potential vulnerabilities within a binary program, performing a baseline analysis to detect potential Return-Oriented Programming (ROP) chains, applying a memory safety mitigation technology to the binary program, performing a protected analysis after applying the memory safety mitigation technology to detect potential ROP chains, comparing results of the baseline analysis and the protected analysis, and generating a report quantifying an impact of the memory safety mitigation technology on exploitability of the identified vulnerabilities. The method enables assessment of the effectiveness of memory safety mitigation techniques in reducing the risk of exploitation, providing valuable insights for improving software security throughout the development lifecycle.

The invention discloses a memory management method and device, and relates to the technical field of heterogeneous computing, and the method comprises the steps: obtaining a memory allocation request of a device, searching a page locking memory block corresponding to the memory allocation request, and allocating the page locking memory block to a corresponding device; receiving a request to release the memory block, identifying device compute streams associated with the memory block, and recording a synchronization event for each compute stream; the recorded synchronization event and metadata of the memory block are associated and stored in a to-be-processed event queue; querying whether the event in the to-be-processed event queue is completed or not; when it is queried that the specific event is completed, the corresponding memory block is recycled to the free memory pool, the technical problems that in the related technology, due to the fact that high-cost memory management functions are called too frequently, performance is low, collaboration with equipment asynchronous operation is difficult, and data competition and errors are likely to be caused are solved, and the memory management efficiency is improved. And the technical effect of greatly improving the memory allocation efficiency and the overall throughput of the system on the premise of ensuring the security of the memory is achieved.

The application discloses a memory safety runtime detection acceleration method combined with static pointer analysis and a medium, and the method comprises the following steps: preprocessing and analyzing the source code of a program to be detected by using a compiler, collecting metadata of array variables, performing intra-procedure alias analysis and inter-procedure alias analysis, inserting a code segment for transferring metadata across procedures, rewriting array subscript expressions in the code, inserting a code segment for out-of-bound detection, inserting runtime detection code, compiling and linking the source code after the plugging by using the compiler and the linker, and generating an executable file; and running the executable file and outputting the result of the memory safety runtime detection. The application uses lightweight Boolean expression calculation instead of heavy runtime detection, can effectively reduce the time overhead of the runtime detection tool without changing the existing code, introducing false negatives and false positives, and guaranteeing the timing of error reporting and memory errors, and has practical application value.

The embodiment of the present specification provides a bounded model detection technical solution about a loop unit, abstracts a memory continuous variable in the loop unit of a to-be-verified module into a symbolic variable, and sets a value interval of the symbolic variable according to the number of elements corresponding to the memory continuous variable, so as to use the symbolic variable abstract description instead of the loop statement in the loop unit for the element value to perform the memory safety verification of the loop unit. In addition, considering that the specific value cannot be obtained after being abstracted into the symbolic variable, an over-approximate value range covering the loop statement result value range is also set in the verification statement using the loop statement result value in the subsequent use to perform verification. In this way, the verification efficiency can be improved.

The application provides a sandbox and a memory isolation method based on binary insertion and a storage medium, which are applied to memory isolation when WASM bytecode coding is performed in an AOT compilation manner, the sandbox extracts code segment information and WASI function information from a WASM virtual machine through a dynamic insertion tool; each branch instruction received by an AOT compilation runtime is analyzed, it is confirmed that the memory accessed by each branch instruction is in the memory corresponding to the AOT compilation or the caller of each branch instruction is on a preset whitelist, and finally, WASM native code obtained after AOT compilation is performed is executed, so that hosting from untrusted AOT code is realized. The sandbox and the memory isolation method provided in the embodiment dynamically detect the AOT module during WASM running, extract the memory layout of the runtime and the save address and linear memory range of the AOT module, limit the control flow and data access, and thus provide the memory security attribute, so the application has high practicability.

The invention discloses an intelligent code vulnerability automatic detection system for basic software development, and belongs to the technical field of software security and static analysis. The system comprises a source code preprocessing and standardization module, a multi-level composite abstract syntax tree construction module, a domain knowledge enhanced vulnerability rule knowledge base, a graph neural network-based context sensitivity analysis module and a symbolic execution and constraint solution guide module. A vulnerability association and root cause positioning module; and a feedback-driven adaptive optimization engine. According to the method, enhanced code representation fusing grammar, semantics and specific field features is constructed, deep semantics, complex data streams and control streams of codes are modeled in combination with a deep learning model, and high-precision and context-sensitive automatic detection of various vulnerabilities such as memory security, concurrent security and logic defects is achieved.