Patent ID: 11934517
Assignee: RUNSAFE SECURITY, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 10:
11. A non-transitory computer-readable storage medium having stored thereon instructions for hijacking program flow in defending against stack-based cybersecurity attacks that exploit vulnerabilities in buffer overflows of a stack register included as part of a random access memory (RAM) configured for storing local variables of a function included in a program binary, wherein the instructions when executed by a processor of an electronic device cause the processor to:
transform the program binary into a transformed program binary by causing the processor to:
scan, at transform time, the program binary to identify code resembling function- like characteristics;
create, at transform time, a global list of addresses of entry points of code associated with the function-like characteristics;
sort, at transform time, the global list of addresses;
detect, in the program binary at transform time, at least one call site where a target is called;
determine, at transform time, an address of the target; and
insert, at transform time, call checking code at the at least one call site wherein the transform time is prior to loading and running the transformed program binary.