Continuous run-time integrity checking for virtual memory

摘要

A run-time integrity checking (RTIC) method compatible with memory having at least portions that store data that is changed over time or at least portions configured as virtual memory is provided. For example, the method may comprise storing a table of page entries and accessing the table of page entries by, as an example, an operating system or, as another example, a hypervisor to perform RTIC on memory in which, as an example, an operating system, as another example, a hypervisor, or, as yet another example, application software is stored. The table may, for example, be stored in secure memory or in external memory. The page entry comprises a hash value for the page and a hash valid indicator indicating the validity status of the hash value. The page entry may further comprise a residency indicator indicating a residency status of the memory page.

主权项

1. A method for run-time integrity checking (RTIC) of a virtual memory system comprising:
calculating a chained overall hash value dependent on preceding memory page hash values corresponding to preceding ones of a plurality of memory pages, the chained overall hash value being chained such that a first preceding memory page hash value corresponding to a first preceding one of the plurality of memory pages is concatenated with a second preceding one of the plurality of memory pages and a second preceding memory page hash value is calculated, with concatenation and hash generation continuing for each block to yield the chained overall hash value; storing a table of page entries, wherein a page entry of the page entries corresponds to a memory page of the plurality of memory pages into which the virtual memory system is organized, wherein the page entry comprises a reference hash value for the page and a hash valid indicator indicating the validity status of the reference hash value; and accessing the table of page entries by a run-time integrity checking system to perform the RTIC of the memory page referenced by the table of the page entries when the memory page is present in physical memory; and inhibiting the RTIC of the memory page in response to the memory page being swapped out of the physical memory into storage.