DYNAMIC INSTRUMENTATION TECHNIQUE Russian patent published in 2010 - IPC G06F15/16 

FIELD: information technology.

SUBSTANCE: first and second exclusion instructions are inserted into an address from user address space. The return address of the called subprogram is stored. The given return address is replaced with the second exclusion instruction address. Control is transferred to the kernel from the first exclusion instruction. Control is transferred to the first exclusion instruction and control is transferred to the kernel from the second exclusion instruction when returning from the given subprogram. A storage for user-supplied subprogram data which must be instrumented is added to the operating system kernel. The following is used for instrumentation: a do-page-fault hander for monitoring return from it, a do-exit handler for monitoring its call, a send-signal handler for monitoring its call.

EFFECT: increased monitoring accuracy with small extra load on the processor and low memory requirements.

4 dwg