Invention Grant
- Patent Title: Using object flow integrity to improve software security
-
Application No.: US16173358Application Date: 2018-10-29
-
Publication No.: US10656885B2Publication Date: 2020-05-19
- Inventor: Kevin W. Hamlen
- Applicant: Board of Regents, The University of Texas System
- Applicant Address: US TX Austin
- Assignee: Board of Regents, The University of Texas System
- Current Assignee: Board of Regents, The University of Texas System
- Current Assignee Address: US TX Austin
- Main IPC: G06F21/62
- IPC: G06F21/62 ; G06F9/48 ; G06F3/12 ; G06F16/17 ; G06K15/00

Abstract:
The present disclosure is directed to a method of creating an object flow integrity (OFI) library module, capable of redirecting an object-like programmatic call, by initiating a multi-pass, recursive process to analyze a module's interfaces, function parameters, and data types. In another aspect, a method is disclosed to modify the binary code of an untrusted module to enable its usage of the OFI library module. In another aspect, during runtime operations of an untrusted module, the OFI library module can receive an object from a caller module, substitute a proxy object, stored in a secure location, and continue the programmatic call using the proxy object.
Information query