Patent ID: 11960598
Assignee: VIRSEC SYSTEMS, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A system for protecting a computer application from code injection attacks, the system comprising:
a processor; and
a memory with computer code instructions stored thereon, the processor and the memory, with the computer code instructions, being configured to cause the system to implement;
a runtime memory protection (RMP) user endpoint agent and an RMP kernel driver component coupled to the RMP user endpoint agent, wherein:
the RMP user endpoint agent is configured to:
(i) receive, from the RMP kernel driver component, representations of events occurring with respect to memory locations associated with a computer application;
(ii) process the received representations to identify a given event that includes: a memory write request, a memory permissions change request, and a thread create request; and
(iii) responsive to identifying the given event, declare a code injection attack and send an alarm indication to the RMP kernel driver component; and

the RMP kernel driver component is configured to:
in response to receiving the alarm indication, implement a protection action, thereby protecting the computer application from the code injection attack.