International Business Machines Corporation

Intel Corporation

Dimitry Kloper

Jacob Doweck

Chaim Shen-Orr

Mark Robert Funk

Baruch Chaikin

Reuven Elbaum

Shlomit Sarah Pinter

Yonatan Shlomovich

Uri Bear

Gyora M Benedek

Elad Peer

Gera Goft

Esther Yeger-Lotem

Various systems and methods for detecting and preventing side-channel attacks, including attacks aimed at discovering the location of KASLR-randomized privileged code sections in virtual memory address space, are described. In an example, a computing system includes electronic operations for detecting unauthorized attempts to access kernel virtual memory pages via trap entry detection, with operations including: generating a trap page with a physical memory address; assigning a phantom page at an open location in the privileged portion of the virtual memory address space; generating a plurality of phantom page table entries corresponding to an otherwise-unmapped privileged virtual memory region; placing the trap page in physical memory and placing the phantom page table entry in a page table map; and detecting an access to the trap page via the phantom page table entry, to trigger a response to a potential attack.

Mitigating attacks on kernel address space layout randomization

A method for controlling operation of a computer software application running on a plurality of computing entities, which are members of a group of mutually-linked computing entities running the application within a distributed computing system. The method includes receiving an indication of a change in membership of the group together with a reason for the change. A membership change message is delivered to the members, so as to inform the members of the change and of the reason for the change.

Delivery of configuration change in a group

Growing community of inventors

Haifa, Israel

Dimitry Kloper