Enhanced security for accessing virtual memory

摘要

A disclosed method includes obtaining a physical address corresponding to a virtual address responsive to detecting a virtual address associated with a memory access instruction and, responsive to identifying a memory page associated with the physical address as a sensitive memory page, evaluating sensitive access information associated with the memory page. If the sensitive access information satisfies a sensitive access criteria, invoking a sensitive access handler to control execution of the memory access instruction.

主权项

1. A method, comprising:
obtaining a physical address corresponding to a virtual address associated with a memory access instruction; identifying a memory page associated with the physical address as a sensitive memory page, including determining a state of a sensitive access enable bit associated with the memory page; evaluating sensitive access information associated with the memory page, including recency information indicative of a most recent access of the memory page; and invoking a sensitive access handler to control execution of the memory access instruction in response to the sensitive access information satisfying a sensitive access criteria including a recency criteria specifying a threshold recency, where the recency criteria is satisfied if the recency information indicates the most recent access of the memory page occurred less recently than the threshold recency.