DETECTION AND MITIGATION OF MALICIOUS INVOCATION OF SENSITIVE CODE

摘要

Particular embodiments described herein provide for an electronic device that can be configured to identify regions of code to be monitored, probe and lock code pages that include the identified regions of code, and remap the code pages as execute only. The code pages can be remapped as execute only in an alternate extended page table view.