Monitoring Translation Lookahead Buffers to Detect Code Injection Attacks.

By identifying memory pages that external I/O operations have modified, a proposed scheme blocks malicious injected code activation, accurately distinguishing an attack from legitimate code injection with negligible performance impact and no changes to the user application.

Bibliographic Details
Published in:	Computer (00189162) Vol. 47; no. 7; pp. 66 - 73
Main Authors:	Ahn, Youngjung, Lee, Yongsuk, Choi, Jin-Young, Lee, Gyungho, Ahn, Dongkyun
Format:	Article
Published:	IEEE Jul2014
Subjects:	Computer input-output equipment Malware Computer performance Computer systems Computer software research
Online Access:	View this record in EBSCOhost

Description
Summary:	By identifying memory pages that external I/O operations have modified, a proposed scheme blocks malicious injected code activation, accurately distinguishing an attack from legitimate code injection with negligible performance impact and no changes to the user application.