Cyberark Software Ltd.

Ilya Abramovich

Dmitry Moskalchuk

Disclosed embodiments relate to systems and methods for securing kernel-level system functions. Techniques include hot patching of a kernel by a kernel module loaded into the kernel; identifying a kernel function initiated by a system call associated with a user-level application; intercepting the kernel function by the kernel module; making available, to a security agent, an indication of at least one operation associated with the kernel function; receiving, from the security agent, a determination of whether the at least one operation associated with the kernel function violates at least one security policy; and based on the determination indicating the at least one operation does not violate the at least one security policy, allowing the system call to the kernel; or based on the determination indicating the at least one operation violates at least one security policy, performing at least one control action.

Growing community of inventors

Petach-Tikva, Israel

Ilya Abramovich