Patent ID: 8364973
Filing Date: 2013-01-29
Classification: G06F

Abstract:
1. A method comprising: loading a section of a software program into a protected partition of memory in a system; generating, on the system, an integrity manifest for the software program, the integrity manifest including a plurality of relocation fix-up values and an expected integrity check value, the relocation fix-up values each including a particular physical memory location; representing the identity of the section of the software program with the expected integrity check value as a hash value of executable code, static configuration data, and relocation fix-up values for the section of the software program; storing, on the system, the integrity manifest; computing, during execution of the software program on the system, a measured integrity check value on the section of the software program; and comparing the measured integrity check value to the expected integrity check value; and determining that the section of the software program has been modified if the generated integrity check value and the expected value do not match.