Linear address mapping protection

摘要

Technologies for securing an electronic device include determining addresses of one or more memory pages, injecting for each memory page a portion of identifier data into the memory page, storing an indication of the identifier data injected into each of the memory pages, determining an attempt to access at least one of the memory pages, determining any of the identifier data present on a memory page associated with the attempt, comparing the indication of the identifier data with the determined identifier data present on the memory page, and, based on the comparison, determining whether to allow the access.

主权项

1. A system for securing an electronic device, comprising:
a hardware processor; a memory communicatively coupled to the processor; and an anti-malware module communicatively coupled to the hardware processor and including instructions on the memory, the instructions, when executed by the hardware processor, configure the anti-malware module to:
determine addresses of one or more memory pages in the memory;for each memory page, inject a portion of identifier data into the memory page;store an indication of the identifier data injected into each of the memory pages;determine an attempt to access a plurality of the memory pages, including detecting a process switch;determine any of the identifier data present on each memory page associated with the attempt;compare each corresponding indication of identifier data with the determined identifier data present on each memory page; andbased on the comparisons, determine whether to allow the access.