The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Dec. 20, 2016

Filed:

Feb. 22, 2013
Applicant:

Vmware, Inc., Palo Alto, CA (US);

Inventors:

Manish Jawa, Bangalore, IN;

Haim Tebeka, Palo Alto, CA (US);

Craig Newell, Cambridge, MA (US);

Assignee:

AirWatch LLC, Atlanta, GA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 9/44 (2006.01); G06F 9/46 (2006.01); G06F 13/00 (2006.01); G06F 9/445 (2006.01); G06F 21/54 (2013.01); G06F 9/54 (2006.01); G06F 21/31 (2013.01); G06F 21/60 (2013.01); G06F 21/53 (2013.01); H04W 12/02 (2009.01); H04L 29/08 (2006.01); H04L 29/06 (2006.01); H04W 12/00 (2009.01);
U.S. Cl.
CPC ...
G06F 8/54 (2013.01); G06F 8/61 (2013.01); G06F 9/44521 (2013.01); G06F 9/54 (2013.01); G06F 21/31 (2013.01); G06F 21/53 (2013.01); G06F 21/54 (2013.01); G06F 21/602 (2013.01); G06F 21/604 (2013.01); H04L 63/10 (2013.01); H04L 63/20 (2013.01); H04L 67/146 (2013.01); H04W 12/02 (2013.01); G06F 2221/2107 (2013.01); G06F 2221/2143 (2013.01); G06F 2221/2149 (2013.01); H04L 63/0272 (2013.01); H04W 12/00 (2013.01);
Abstract

One embodiment of the system disclosed herein facilitates identifying a system call in an application and replacing the identified system call with a customized function call. During operation, the system executes an executable file of the application, wherein the executable file has been modified to execute a hooking and injection manager at run time. Prior to executing the system call, the system executes the hooking and injection manager. While executing the hooking and injection manager, the system determines, from a symbol table, a symbol table index value corresponding to a symbol associated with the system call. The system further determines an import table entry storing a pointer to the system call based on the symbol table index value, and changes the pointer in the import table entry so that the pointer indicates an address of the customized function call.


Find Patent Forward Citations

Loading…