DETECTION AND MITIGATION OF HARM FROM THE MALICIOUS CALL OF SENSITIVE CODE Russian patent published in 2018 - IPC G06F21/50 G06F21/56 

FIELD: information security.

SUBSTANCE: invention relates to information security. Disclosed is at least one computer readable storage medium containing one or more instructions, which, when executed by at least one processor, cause: identification of code areas in the extended page table, which includes pages of the sensitive code of the application programming interface (API) to be monitored; probing and blocking code pages that include identified areas of code, and re-mapping said code pages as soon as the extended page table being executed in an alternative form; detection of page loading, and page loading refers to a page that does not include the proper API entry point; definition, based on a page load detection related to a page that does not include the proper API entry point, from the extended page table, whether the page referred to is to be tracked; and generation, based on the definition that the page is to be monitored, the failure of execution.

EFFECT: technical result is to protect the sensitive code from attempted execution with an improper API entry point without undue cost.

19 cl, 13 dwg