Patent ID: 7444677
Filing Date: 2008-10-28
Classification: G06F

Abstract:
1. A method of protecting sensitive code, comprising: inserting into said sensitive code a first insertion comprising a first authorization check which, when said sensitive code is executing in a computing environment, detects whether an unauthorized action is occurring; and a first cascade trigger which, upon said detection of an unauthorized action, changes a first state of said computing environment in a way detectable by a second authorization check; inserting into said sensitive code a second insertion comprising said second authorization check; and a second cascade trigger, which upon detection of said changed first state, generates one of a) a stack failure and b) a heap failure; and inserting into said sensitive code a third insertion comprising decoy code, wherein said decoy code changes said first state of said computing environment in a way which will not cause any of a group of authorization checks comprising said first authorization check and said second authorization check to detect an unauthorized action if, before said decoy code changes, no authorization check from said group would have detected said unauthorized action.