Patent ID: 11934517
Assignee: RUNSAFE SECURITY, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 15:
16. An apparatus for hijacking program flow in a program binary for defending against stack-based cybersecurity attacks that exploit vulnerabilities in buffer overflows comprising:
at least one random access memory (RAM) storing a stack register configured for storing local variables of a function included in a program binary; and
at least one processor coupled to the at least one RAM, the at least one processor configured for:
transforming the program binary into a transformed program binary by performing the following:
scanning, at transform time, the program binary to identify code resembling function-like characteristics;
creating, at transform time, a global list of addresses of entry points of code associated with the function-like characteristics;
sorting, at transform time, the global list of addresses;
detecting, in the program binary at transform time, at least one call site where a target is called;
determining, at transform time, an address of the target; and
inserting, at transform time, call checking code at the at least one call site,

wherein the transform time is prior to loading and running the transformed program binary.