The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jan. 17, 2017

Filed:

Oct. 26, 2015
Applicant:

Palo Alto Networks, Inc., Santa Clara, CA (US);

Inventors:

ChienHua Lu, Santa Clara, CA (US);

Bo Qu, Fremont, CA (US);

Kyle Sanders, Sunnyvale, CA (US);

Assignee:

Palo Alto Networks, Inc., Santa Clara, CA (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); G06F 21/56 (2013.01); G06F 21/55 (2013.01); G06F 21/52 (2013.01);
U.S. Cl.
CPC ...
H04L 63/1416 (2013.01); G06F 21/52 (2013.01); G06F 21/55 (2013.01); G06F 21/566 (2013.01);
Abstract

Various techniques for exploit detection based on heap spray detection are disclosed. In some embodiments, exploit detection based on heap spray detection includes executing a program in a virtual environment, monitoring a heap of a memory while executing the program in the virtual environment, and detecting a potential heap spray attack based on detecting a burst allocation of a first plurality of blocks in the heap of the memory, in which each of the first plurality of blocks is stored in the predefined address range of the memory.


Find Patent Forward Citations

Loading…