89 results about "Memory safety" patented technology

The invention discloses an AI large model security all-in-one machine and a security channel establishment method and device, and relates to the technical field of multi-party security computing. The AI large model security all-in-one machine comprises a security processor and a physical memory module; the security all-in-one machine is provided with a plurality of trusted execution environments (TEE), different TEEs have different secret keys used for memory encryption and decryption and serve as memory secret keys, the memory secret keys of the TEEs are generated by a memory encryption module of a security processor based on a hardware trusted root of the security processor, and different memory spaces which are independently used are distributed to different TEEs on a physical memory module; an AI large model application is installed on each TEE, and data generated by the AI large model application is encrypted, written and decrypted and read in the memory space allocated for the TEE by the memory security module by using the memory key corresponding to the TEE. By adopting the scheme, the data security for localized deployment of the AI large model is improved.

The invention relates to an automatic memory protection method and device, computer equipment and a storage medium, and the automatic memory protection method comprises the steps: responding to a real-time memory read-write instruction, and determining a target memory address corresponding to the memory read-write instruction; determining a pre-stored tag value corresponding to the target memory address and an actual tag value currently embedded in a memory block pointed by the target memory address; and when it is detected that the pre-stored tag value is not matched with the actual tag value, stopping a memory operation associated with the memory read-write instruction. Through the method and the device, the problem that the data-oriented attack cannot be effectively prevented is solved, the data-oriented attack is effectively prevented, and the memory security and the system operation efficiency are improved.

The invention discloses a time-class memory security detection method, which comprises the following steps of: obtaining a plurality of analysis units comprising a function or a function group on the basis of a source code; the plurality of analysis units comprise a first analysis unit and a second analysis unit, the first analysis unit comprises a function call statement used for calling the second analysis unit, and when the function call statement is analyzed, the state of the memory block pointed by the pointer in the analysis units is analyzed by utilizing summary information of the second analysis unit. Performing state analysis on the state of the memory block pointed by the pointer associated with the function call statement, wherein the summary information of the analysis unit is used for describing the memory state when the memory block pointed by the access pointer in the analysis unit enters and exits from the analysis unit; and generating summary information of the analysis unit according to the state analysis result corresponding to the analysis unit, and obtaining a detection result related to the time-class memory problem in the analysis unit. Therefore, the resource overhead and the false and missing report rate are reduced when the time-class memory problem is detected.

The present disclosure provides a method for analyzing exploitability of memory safety vulnerabilities in binary programs. The method includes identifying potential vulnerabilities within a binary program, performing a baseline analysis to detect potential Return-Oriented Programming (ROP) chains, applying a memory safety mitigation technology to the binary program, performing a protected analysis after applying the memory safety mitigation technology to detect potential ROP chains, comparing results of the baseline analysis and the protected analysis, and generating a report quantifying an impact of the memory safety mitigation technology on exploitability of the identified vulnerabilities. The method enables assessment of the effectiveness of memory safety mitigation techniques in reducing the risk of exploitation, providing valuable insights for improving software security throughout the development lifecycle.

The invention discloses a dynamic analysis-combined memory security vulnerability fuzzy test method. The method comprises the following steps of inserting pointer metadata for dynamic analysis into a source code file of a to-be-tested program, performing memory security detection, and performing related type definition and function definition of a memory allocation packaging function; analyzing the source code by using a compiler, generating an abstract syntax tree, traversing the abstract syntax tree, performing instrumentation on nodes of the abstract syntax tree, and maintaining a shared memory variable of a minimum pointer boundary distance and a memory allocation peak value; compiling the source code after instrumentation to obtain an assembly code; performing coverage rate instrumentation on the assembly code, and skipping the previously inserted code for dynamic analysis; assembling and linking the instrumented assembly codes to obtain an executable file; performing fuzzy testing on the executable file; and running the fuzzy test to output a program input file which enables the target program to have a memory security error. According to the method, memory vulnerabilities in the target program can be found, and the error detection capability of fuzzy testing is improved.

The invention discloses a real-time library data service and interface management system based on a memory security language, which comprises a system access layer, an acquisition control layer and a business service layer, and is used for providing a synchronous or asynchronous external interface based on memory security and a native client interface. Strong-experience man-machine interaction and intensive calling of an upstream system are carried out; a hot loading mode based on scripts is provided, a past protocol loading mode is abandoned, and codes can be flexibly effective and executed in real time under the condition that compiling and restarting are not needed; a data transmission mechanism based on an MQ mode is provided, and data transmission between systems is facilitated.

The invention relates to a software and hardware combined fine-grained memory protection mechanism, which realizes high-speed mapping from a physical address to a fine-grained permission label by integrating a metadata search unit and a metadata conversion lookup buffer on a critical path of a processor loading / storage unit. An operating system maintains a multi-level fine-grained permission metadata table in a main memory, and the minimum memory protection granularity is refined to a 64-byte sub-page level. When a processor executes a memory access instruction, address conversion and permission verification are completed in parallel, an access type and a permission label are compared in real time within 1-2 clock periods, and when permission conflicts are detected, high-priority abnormity is triggered immediately, and illegal addresses and fault types are reported accurately. The method supports instruction set extension, buffer overflow protection, multi-level metadata management and user mode and kernel mode differentiated authority control, reduces the influence on the performance of the processor while improving the security of the memory, and is suitable for a computing system with high security and high performance.

An apparatus includes memory access type determining circuitry to: determine whether a given write operation specifying a target address is to be a tag-non-preserving write operation; and memory access circuitry to: trigger, in response to determining that the given write operation is to be the tag-non-preserving write operation, a memory system to process the tag-non-preserving write operation specifying the target address, the tag-non-preserving write operation indicating that, following completion of the tag-non-preserving write operation, the memory system is not required to preserve a current value of a memory safety check tag associated with the target address.

The embodiment of the invention discloses a memory security self-checking circuit and method, a chip and a memory security circuit. The memory security self-checking circuit comprises a random number generator, a random address generation module, a first address output selector, a first memory, a second memory, a self-checking module and a decryption circuit, the output end of the random number generator is connected with the first input end of the random address generation module, and the output end of the random address generation module is connected with the first input end of the first address output selector; the output end of the first address output selector is connected with the input end of the first memory and the input end of the second memory; the output end of the first memory is connected with the input end of the self-checking module, and the output end of the self-checking module is used for providing a result flag bit obtained by checking the self-checking data for the control circuit; the output end of the second memory is connected with the input end of the decryption circuit. The security of the chip is improved, and important programs and data related to the chip are protected.

The invention relates to the technical field of underlying software of a computer system, in particular to an interrupt controller driving method based on a rust language, which comprises the steps of unified hardware abstract interface, strong type interrupt number management, thread safe interrupt distribution, multi-version GIC automatic identification, virtual interrupt mapping, multi-core load balancing and virtualization support. According to the method, a memory security mechanism and a type system of a Rust language are utilized, unified, safe and efficient driving of GICv2 / v3 / v4 under an Arm64 architecture is achieved, memory security defects in traditional C language driving are effectively eliminated, and system reliability and performance under a multi-core and virtualization scene are improved.

The application discloses a memory management method and device, relates to the technical field of heterogeneous computing, and comprises the following steps: obtaining a memory allocation request of a device, and searching for a page-locked memory block corresponding to the memory allocation request to allocate the memory block to the corresponding device; receiving a request for releasing the memory block, identifying a device computing flow associated with the memory block, and recording a synchronization event for each computing flow; storing the recorded synchronization event and metadata of the memory block in a to-be-processed event queue; querying whether an event in the to-be-processed event queue is completed; and when it is queried that a specific event is completed, recycling the corresponding memory block to an idle memory pool, so that the technical problem that in the related art, high-cost memory management function calls are too frequent, performance is low, and it is difficult to cooperate with device asynchronous operation, and data competition and errors are easily caused is solved, and the technical effect that the efficiency of memory allocation and the overall throughput of a system are greatly improved under the premise of ensuring memory safety is achieved.

A hardware revocation engine for invalidating a pointer, that refers to a deallocated object, from memory in a memory constrained system. The hardware revocation engine has a revocation pipeline coupled to a pipeline of a main processor of the memory constrained system. The revocation pipeline shares access to memory with the main pipeline, the revocation pipeline comprising at least a first stage and a subsequent second stage. In a first cycle of the revocation pipeline, the first stage of the revocation pipeline loads a first pointer-sized value from the memory. In a second cycle: the second stage checks whether the first loaded pointer-sized value is a pointer referring to deallocated memory. In a third cycle: in response to the outcome of the check indicating that the first loaded pointer-sized value is a pointer referring to deallocated memory, the first stage invalidates the first pointer-sized value.

This invention relates to a hybrid Rust, C, and assembly code construction method based on an embedded operating system, belonging to the field of embedded operating systems. This invention utilizes Rust's External Function Interface (FFI) and the "staticlib" and "rlib" code classes supported by the Rust compiler to align the Rust library API with the APIs of the C and assembly libraries in the embedded operating system. This aligns the Rust code with the relocatable files that can be recognized by the embedded operating system, guiding the build system to link the Rust library with the C and assembly libraries to form the final embedded operating system executable file. This invention can link Rust components with C and assembly components to form a single executable file, fully utilizing Rust's type safety and memory safety features to improve the overall security and reliability of the system, while also considering the reuse and expansion of existing code libraries.

The embodiment of the invention provides a memory security violation detection method and device, computer equipment and a storage medium. A magic number is inserted in advance for a red area and a released memory area in a memory allocated by each application program. The method comprises the following steps: determining whether a magic number is stored in a target memory object of a specified application program or not; the target memory object is a section of continuous memory in which memory security violation may occur in a heap region, a stack region or a global region; under the condition that the magic number is stored in the target memory object, determining whether the target memory object is accessible or not; and under the condition that the target memory object is inaccessible, determining that the memory security violation exists. The shadow memory class is not directly queried to determine whether the memory security is violated, but whether the magic number is stored in the target memory object is determined firstly, and whether the target memory object is accessible is determined only when the magic number exists, so that the extra runtime overhead during the running of the specified application program can be reduced, and the memory security of the specified application program is improved. And the resource utilization efficiency is improved.

Techniques for using integrity check value tripwires for memory safety are described. In an embodiment, an apparatus includes an instruction decoder to decode one or more instructions to copy a memory region; and execution circuitry coupled to the instruction decoder, the execution circuitry to perform one or more operations corresponding to the one or more instructions, including detecting an integrity check value (ICV) mismatch; determining whether a granule in the memory region represents a tripwire; determining a suppression mode associated with the one or more instructions; and in response to determining that the suppression mode allows copying the tripwire, copying the tripwire.

The invention relates to the field of computers, and provides an executable linkable format file structure randomization method, device and equipment, and the method comprises the steps: converting an executable linkable format file into an LLVM intermediate representation document; performing structural body randomization processing on the LLVM intermediate representation document to obtain a randomized LLVM intermediate representation document; and recompiling the randomized LLVM intermediate representation document into a target file with a randomized structural body layout, and generating the target file into an executable and linkable format file through a link and outputting the executable and linkable format file. According to the method and the device, the problem that structural body internal storage layout randomization cannot be directly carried out on the binary executable file in the prior art is solved, automatic randomization processing is carried out on the structural body in the ELF file through LLVM intermediate representation under the condition that source codes are not needed, and the internal storage safety and the anti-attack capability of a program are enhanced.

Each memory location of a main memory (140) is associated with a respective tag bit indicating whether a respective value stored at the respective memory location is a pointer. A revocation entity (135) invalidates one or more pointers referring to one or more deallocated objects in the main memory. The revocation entity is arranged between a memory interconnect (130) and the main memory, and implements a revocation operation, comprising loading a value from a current memory location of the main memory, and overwriting the tag bit associated with the current memory location of the main memory, if the loaded value is a pointer referring to a deallocated object. The revocation entity detects store operations of a main processor (120) to the main memory and aborts the revocation operation, if during the revocation operation a store operation to the current memory location of the main memory is detected.

A time-type memory security detection method, comprising: on the basis of a source code, obtaining a plurality of analysis units each comprising a function or a function group; performing state analysis on the state of a memory block to which a pointer in the analysis units points, wherein the plurality of analysis units comprise a first analysis unit and a second analysis unit, the first analysis unit contains a function call statement used for calling the second analysis unit, and when the function call statement is being analyzed, digest information of the second analysis unit is used to perform state analysis on the state of the memory block to which the pointer associated with the function call statement points, the digest information of the analysis unit being used for describing the memory state of the memory block to which an entry and exit pointer in the analysis units points when the memory block enters and exits the analysis units; and, according to a state analysis result corresponding to the analysis units, generating digest information of the analysis units, and obtaining a detection result related to time-type memory problems in the analysis units. Thus, the resource overhead and the false and missing report rate are reduced during detection of time-type memory problems.

The application provides a hardware memory access control method, a software isolation domain construction method and equipment, and relates to the technical field of computer architecture and memory security. The method comprises the following steps: configuring a bit identifier for a memory page; configuring a running state bit identifier in a processor, wherein the running state bit identifier represents the authority level of a current execution context; when the processor executes a memory access operation, the hardware checks the relationship between the running state bit identifier and the bit identifier of a target memory page according to a preset lattice order rule to obtain a checking result; and when the checking result indicates that the authority of the running state bit identifier is higher than the authority of the bit identifier of the target memory page, the processor is allowed to access the target memory. Through real-time checking of the authority identifier based on the lattice order relationship by the hardware, efficient and scalable fine-grained memory access control is achieved.

The application relates to a method for performing memory safety dynamic analysis on a program containing specific sentences. The method comprises the following steps: selecting a project directory or a single source code file to be instrumented; preprocessing the source code, replacing macro calls with the content in the macro definition, and commenting out the original macro call; generating a symbol table and an abstract syntax tree of the source code by using a compiler; traversing all nodes in the abstract syntax tree, performing static analysis on the source code, and modifying the source code for sentences that cannot be processed, and then re-instrumenting the source code; traversing all nodes in the abstract syntax tree, performing different instrumentations on the source code according to different node types, compiling the instrumented project directory or file by using a compiler, generating an executable file on a target system, and running the executable file, performing memory error detection on the program containing specific sentences, and reporting the position of the source code corresponding to the error. The method avoids the problems of instrumentation failure and the failure of correctly compiling the program after instrumentation.

The invention provides a communication method and device, a computer readable storage medium and a chip, and relates to the technical field of automatic driving. The communication method is applied to the computer system, the computer system comprises a first subsystem and a second subsystem, the security level of the first subsystem is higher than that of the second subsystem, the first subsystem comprises a memory access checker, and the method comprises the following steps: the memory access checker receives a memory access request from a memory access initiator, and determining whether the security level of the memory to be accessed by the memory access initiator is matched with the security level of the memory access initiator according to pre-configured memory security level division information, and allowing the memory access initiator to access the memory address when the security level of the memory address is matched with the security level of the memory access initiator. According to the method and the device, different subsystems of the computer system can be well isolated.

A hardware revocation engine for invalidating a pointer, that refers to a deallocated object, from memory in a memory constrained system. The hardware revocation engine has a revocation pipeline coupled to a pipeline of a main processor of the memory constrained system. The revocation pipeline shares access to memory with the main pipeline, the revocation pipeline comprising at least a first stage and a subsequent second stage. In a first cycle of the revocation pipeline, the first stage of the revocation pipeline loads a first pointer-sized value from the memory. In a second cycle: the second stage checks whether the first loaded pointer-sized value is a pointer referring to deallocated memory. In a third cycle: in response to the outcome of the check indicating that the first loaded pointer-sized value is a pointer referring to deallocated memory, the first stage invalidates the first pointer-sized value.

The application relates to the technical field of memory management, in particular to a memory safety management device and method of an operating system. The device comprises a memory management module, a data safety module, an authority management module, a log system module and an exception processing module; when the memory management module allocates memory for a program, space record information is simultaneously allocated, including data verification information; after writing data is completed, the data safety module verifies the data of the whole memory to generate a unique signature of the data, and writes the signature into the data verification information; when accessing the memory data, the data safety module generates a unique signature of the memory data and compares the signature with the signature in the data verification information; if the signatures are consistent, the memory access can be normally carried out; if the signatures are inconsistent, the memory access is terminated, and the exception processing module is informed. The application can avoid abnormal memory access, solve the hidden danger of memory protection, avoid memory out-of-bound access and improve the safety of memory protection.

The invention discloses a method for analyzing a pointer of a swan Mongolia ArkTS cache component based on static analysis, which comprises the following steps of: screening AppStorage-related APIs (Application Program Interface) through three-address code semantic modeling, constructing a bidirectional synchronous strong connected component by adopting a reverse backflow edge, and blocking unidirectional synchronous reverse propagation based on freezing constraint, so as to achieve the purpose of analyzing the pointer of the swan Mongolia ArkTS cache component. And realizing cross-component data stream accurate tracking by combining a dynamic pointer assignment graph and an accessibility algorithm. According to the method, the false alarm rate of pointer analysis is reduced from 20% to 5%, the accuracy rate of memory leak detection reaches 98%, the analysis efficiency is improved by 40%-60%, the method is compatible with an OpenHarmony tool chain, and the problems of memory security and optimization under an ArkTS response type synchronization mechanism are solved.

The invention discloses a static pointer analysis-combined detection acceleration method and medium during memory safe operation, and the method comprises the steps: carrying out the preprocessing and analysis of a source code of a to-be-detected program through a compiler, collecting the metadata of an array variable, carrying out the intra-process alias analysis and the inter-process alias analysis, and obtaining a to-be-detected program; inserting code snippets used for transmitting metadata in a cross-process manner, rewriting array subscript expressions in codes, inserting code snippets used for border crossing detection, inserting runtime detection codes, compiling and linking instrumented source codes by using a compiler and a linker, and generating an executable file; and running the executable file, and outputting a detection result during safe running of the memory. According to the method, lightweight Boolean expression calculation is used for replacing heavy-weight runtime detection, the time overhead of a runtime detection tool can be effectively reduced on the premise that existing codes are not changed, missing report and false report are not introduced, and the time sequence of report errors and memory errors is guaranteed, and the method has practical application value.

An apparatus comprising a processor coupled to a memory to provide BTI protection and memory coloration protection. The processor branches to a second function from a first function by colorating a first memory region associated with the first function with an inaccessible color value, colorating a second memory region associated with the second function with a second color value, operating on the second memory region, then colorating the second memory region with the inaccessible color value from the first function calling the second function. The processor then returns control to the first function and colorates the first memory region with the first color value. Coloration includes branching to a coloration routine, where the coloration routine includes a basic block beginning with a single branch target instruction, identifying and authorizing a call routine with coloration, colorating a memory region associated with the call routine with a hard-coded color value, and returning to the call routine.

The application discloses a program verification metadata export method and device and a deterministic execution environment, and belongs to the field of compiling technology and formal verification. The method comprises the following steps: marking the pointer ownership state in the source code through attribute annotation; extracting the ownership conversion information and generating the structured metadata during compiling; and outputting the metadata to the special section of the compiling product, so that the memory safety of the program can be verified independently by directly reading the metadata by an external system. In order to make the exported metadata complete and inferable, a deterministic running environment composed of zero global state context, full-link memory management, capability token and deterministic execution suite is provided. In the application, specific attribute annotations in the source code are identified during the compiling process, the pointer ownership state conversion information and the function formal contract are generated into the structured metadata with a predefined binary format, and are written into the special metadata section of the target file (such as an ELF). In this way, the processing of the internal semantics of the program is changed from being internally digested and reformed by the compiler to being actively and standardized output to the external system, so that the technical obstacle that the program semantics information cannot be directly and reliably acquired by the external AI or verification tool is solved.

The invention discloses a lightweight pointer security method for preventing a wild pointer by embedded software and a corresponding system, which are used for solving the problems of complex prevention and high overhead of the wild pointer in the prior art. The invention discloses a lightweight pointer safety method for preventing a wild pointer of embedded software. The method comprises the following steps: initializing a pointer registry when the embedded software is started; the pointer registry is used for storing a security pointer registry structural body, and the security pointer registry structural body comprises a 4-byte original pointer, a 1-byte pointer state and a 1-byte pointer permission; according to the pointer application, judging whether an unoccupied position exists in the pointer registry or not; if yes, allocating a memory, recording in the pointer registry, and meanwhile, returning a security pointer structure containing a 4-byte original pointer and a 2-byte registry index position; otherwise, returning an invalid security pointer structure. According to the lightweight solution for preventing the wild pointer in the embedded communication system, efficient memory security management is realized through pointer packaging and a registry mechanism.