发明名称 |
Reorganization of virtualized computer programs |
摘要 |
In an embodiment, a data processing method comprises detecting that a computer is loading a dynamic loader in a user space, the dynamic loader intending to load computer program code; allowing loading the dynamic loader into memory and then suspending operation of the dynamic loader; reorganizing the computer program code into reorganized code by re-ordering a plurality of code segments into a new order that is potentially different than an original order of the plurality of code segments; modifying the dynamic loader in memory to redirect one or more system or library call instructions of the dynamic loader to cause referencing the reorganized code; updating a binary header of the reorganized code to reflect the new order; allowing the dynamic loader to load the reorganized code based on the binary header after the updating. |
申请公布号 |
US9535855(B2) |
申请公布日期 |
2017.01.03 |
申请号 |
US201514656409 |
申请日期 |
2015.03.12 |
申请人 |
Cisco Technology, Inc. |
发明人 |
Epstein Joseph |
分类号 |
G06F9/44;G06F11/00;G06F12/14;G06F9/45;G06F9/445;G06F9/455 |
主分类号 |
G06F9/44 |
代理机构 |
Hickman Palermo Becker Bingham LLP |
代理人 |
Hickman Palermo Becker Bingham LLP |
主权项 |
1. A computer-implemented method comprising:
detecting that a computer is loading a dynamic loader in a user space, wherein the dynamic loader is configured to load computer program code; allowing, by security logic, loading the dynamic loader into memory and then suspending operation of the dynamic loader; reorganizing the computer program code into reorganized code by re-ordering a plurality of code segments of the computer program code into a new order that is different than an original order of the plurality of code segments; modifying, by the security logic, the dynamic loader in the memory to redirect one or more system or library call instructions of the dynamic loader to cause referencing the reorganized code; updating, by the security logic, a binary header of the reorganized code to reflect the new order; after the updating, allowing, by the security logic, the dynamic loader to load the reorganized code based on the binary header; wherein the method is performed by one or more computing devices. |
地址 |
San Jose CA US |