Malware detection and prevention by monitoring and modifying a hardware pipeline

摘要

The various aspects provide a method for recognizing and preventing malicious behavior on a mobile computing device before it occurs by monitoring and modifying instructions pending in the mobile computing device's hardware pipeline (i.e., queued instructions). In the various aspects, a mobile computing device may preemptively determine whether executing a set of queued instructions will result in a malicious configuration given the mobile computing device's current configuration. When the mobile computing device determines that executing the queued instructions will result in a malicious configuration, the mobile computing device may stop execution of the queued instructions or take other actions to preempt the malicious behavior before the queued instructions are executed.

主权项

1. The method of monitoring queued hardware instructions to protect operations of a wireless device that includes a hardware pipeline, the method comprising:
accessing instructions currently queued in the hardware pipeline (“queued instructions”); determining whether executing the queued instructions could result in a malicious configuration based on information included in a malicious and pathway configuration database received from a network server; determining whether the queued instructions have already been executed in response to determining that executing the queued instructions could result in the malicious configuration; preventing execution of the queued instructions in response to determining that executing the queued instructions could result in the malicious configuration and that the queued instructions have not already been executed; and implementing malicious behavior mitigation in response to determining that executing the queued instructions could result in the malicious configuration and that the queued instructions have already been executed.