Patent ID: 11934517
Assignee: RUNSAFE SECURITY, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A method of hijacking program flow for defending against stack-based cybersecurity attacks that exploit vulnerabilities in buffer overflows of a stack register included as part of a random access memory (RAM) configured for storing local variables of a function of a program binary comprising:
transforming the program binary into a transformed program binary by performing the following:
scanning, at transform time, the program binary to identify code resembling function-like characteristics;
creating, at the transform time, a global list of addresses of entry points of code associated with the function-like characteristics;
sorting, at the transform time, the global list of addresses;
detecting, in the program binary at the transform time, at least one call site where a target is called;
determining, at the transform time, an address of the target; and
inserting, at the transform time, call checking code at the at least one call site wherein the transform time is prior to loading and running the transformed program binary.