Performing security operations using binary translation

摘要

In an embodiment, a processor includes a binary translation engine to receive a code segment, to generate a binary translation of the code segment, and to store the binary translation in a translation cache, where the binary translation includes at least one policy check routine to be executed during execution of the binary translation on behalf of a security agent. Other embodiments are described and claimed.

主权项

1. A system comprising:
a hardware processor including a binary translation engine having a binary translation steering unit and an instrumentation unit, the binary translation engine to receive a code segment responsive to profiling of an application including the code segment by a security agent, to generate a binary translation of the code segment, and to store the binary translation in a translation cache, wherein the binary translation comprises an instrumented version of the code segment including at least one policy check routine comprising one or more security checks embedded therein to be executed as an in-line security check during execution of the binary translation without a transfer of control to the security agent, the transfer of control comprising a context switch; the translation cache coupled to the hardware processor to store the binary translation; and a physical memory coupled to the hardware processor, wherein the translation cache is located within the physical memory.