FIELD: information security.
SUBSTANCE: result is achieved due to steps, according to which: converting the source code of the program into an equivalent machine code; constructing control flow graphs, which reflect the structure and syntax of the source code of the program; converting control flow graphs into call flow graphs using target instructions received from the operating system; generating at least one control flow signature based on the generated call flow graphs; starting a control flow monitor, after which a target process corresponding to said program is launched in the operating system; intercepting, by means of a control flow monitor, instructions of said program executed by the target process; checking the intercepted instructions for compliance with at least one control flow signature of said target process; if the instructions of the target process do not match the signature of the control flow, an error in the operation of the target process is determined.
EFFECT: high efficiency of detecting malfunction of a process in an operating system.
11 cl, 7 dwg
Title | Year | Author | Number |
---|---|---|---|
SYSTEM AND METHOD FOR STATIC ANALYSIS OF EXECUTABLE BINARY CODE AND SOURCE CODE USING FUZZY LOGIC | 2021 |
|
RU2783152C1 |
SYSTEMS AND METHODS FOR CONTROLLING DRIVERS IN A COMPUTER SYSTEM | 2002 |
|
RU2304305C2 |
SYSTEM AND METHOD FOR CONTROLLING THE DELIVERY OF MESSAGES TRANSMITTED BETWEEN PROCESSES FROM DIFFERENT OPERATING SYSTEMS | 2021 |
|
RU2777302C1 |
MACHINE CODE ACCESS LIMITATION METHOD TO THE OPERATING SYSTEM RESOURCES | 2016 |
|
RU2625052C1 |
PROJECTION OF OWN APPLICATION PROGRAMMING INTERFACES OF OPERATING SYSTEM INTO OTHER LANGUAGES | 2011 |
|
RU2598600C2 |
METHOD FOR EXCLUDING PROCESSES OF ANTIVIRUS SCANNING ON THE BASIS OF DATA ON FILE | 2015 |
|
RU2595510C1 |
SYSTEM AND METHOD FOR AUTOMATIC PROCESSING OF SOFTWARE SYSTEM ERRORS | 2012 |
|
RU2521265C2 |
SYSTEM AND METHOD FOR STANDARDISED ASSEMBLING MACHINE IN GRAPH PROCESSING SYSTEM | 2004 |
|
RU2355031C2 |
RUNTIME SYSTEM | 2011 |
|
RU2601198C2 |
SYSTEM AND METHOD OF DISTRIBUTED COMPUTATIONS | 2010 |
|
RU2554509C2 |
Authors
Dates
2024-04-16—Published
2023-11-20—Filed