Patent ID: 7739516

Claim:
A method for run-time verification of an import address table for a software module, said method comprising acts of: loading a software module into system memory, the software module including an import address table that is configured in-memory with import address table entries comprising stored addresses of one or more external functions in external modules that are used by the software module during run-time; and performing run-time verification of the in-memory import address table of the software module loaded in system memory, wherein run-time verification comprises: determining a correct address for each external function that is deemed a critical function for which a corresponding entry of the external function in the in-memory import address table must be run-time verified; and verifying that the stored address in the in-memory import address table for the external function is valid if said stored address is equivalent to the determined correct address for the external function; constructing a verified import address table version of the in-memory import address table at a time when said in-memory import address table is validated; and re-verifying the in-memory import address table by comparing said verified import address table to said in-memory import address table, wherein said act of re-verifying occurs periodically while said software module is executing.