INTRUSION DETECTION DURING PROGRAM EXECUTION IN A COMPUTER

摘要

The present invention includes a computer system (20) with a memory (32, 34, 36) and a processing device (24). The processing device (24) includes logic (50) to alter content of one or more instructions of a computer program and store the computer program after instruction content alteration in the memory (32, 34, 36). The processing device (24) is further effective to restore the one or more instructions to the unaltered content before execution with the processing device (24). Intrusion by a different program during execution of the computer program can be detected based on submission of an improper form of instruction by the different program for execution through this alteration/restoration procedure for the computer program.