Trop, Pruner & Hu, P.C.
System, apparatus and method for instruction level behavioral analysis without binary instrumentation
In one embodiment, an apparatus includes an execution monitor to monitor an application in execution, identify a code region, generate region information for the code region, and analyze the code region to identify potential malicious behavior, and if the potential malicious behavior is identified, to alert a security agent, and otherwise to enable the code region to execute, where the execution monitor is isolated from the application. Other embodiments are described and claimed.
Intel Corporation
G G
G06F G06F
inventional inventional
Koichi Jiunn-Yeu Tugrul Paul A.
Yamada Chen Ince Campbell