System, method and computer program product for utilizing code stored in a protected area of memory for securing an associated system
View Patent ↗A security system, method, and computer program product are provided. In use, code is stored in a protected area of memory. In addition, the stored code is utilized for securing a system associated with the protected area of memory.
1. A method, comprising:
storing code in a protected area of memory in a protected system comprising a protected system environment,
controlling read, write, and execute access to the protected area of memory utilizing a control agent separated from the protected system environment via enabling technology that provides an environment for executing code separate from the protected system environment;
initiating execution on the protected system, by the control agent, of at least a portion of the stored code; and
securing, by the control agent, code and data stored within the protected system outside the protected area of memory utilizing the at least a portion of the stored code.
2. The method of claim 1 , wherein the enabling technology is implemented using a virtual machine.
3. The method of claim 1 , wherein the enabling technology is implemented using a processor chipset extension.
4. The method of claim 1 , wherein the enabling technology is implemented in a basic input output system (BIOS) extension.
5. The method of claim 1 , wherein the protected system comprises an operating system and code can execute utilizing the enabling technology without being affected by code executing under control of the operating system.
6. The method of claim 1 , wherein the enabling technology monitors memory outside the protected area of memory within the protected system.
7. The method of claim 6 , wherein the enabling technology provides one or more callback functions based on access to the monitored memory.
8. The method of claim 1 , wherein the enabling technology provides one or more callback functions invoked based on an occurrence of a predetermined event.
9. The method of claim 8 , wherein the one or more callback functions are invoked for execution within the protected system.
10. The method of claim 8 , wherein the one or more callback functions are invoked for execution outside the protected system.
11. A non-transitory computer readable storage medium comprising executable instructions stored thereon that when executed by one or more processors cause one or more of the processors to:
access stored code in a protected area of memory in a protected system comprising a protected system environment,
control read, write, and execute access to the protected area of memory utilizing a control agent separated from the protected system environment via enabling technology that provides an environment for executing code separate from the protected system environment;
initiate execution on the protected system, by the control agent, of at least a portion of the stored code; and
secure, by the control agent, code and data stored within the protected system outside the protected area of memory utilizing the at least a portion of the stored code.
12. The non-transitory computer readable storage medium of claim 11 , wherein the enabling technology is implemented using one or more of a processor chipset extension, a basic input output system (BIOS) extension, or a virtual machine.
13. The non-transitory computer readable storage medium of claim 11 , wherein the protected system comprises an operating system and code can execute with the enabling technology without being affected by code executing under control of the operating system.
14. The non-transitory computer readable storage medium of claim 11 , wherein the enabling technology monitors memory within the protected system and separate from the protected area of memory.
15. The non-transitory computer readable storage medium of claim 14 , wherein the enabling technology provides one or more callback functions based on access to the monitored memory.
16. The non-transitory computer readable storage medium of claim 11 , wherein the enabling technology provides one or more callback functions invoked based on an occurrence of a predetermined event.
17. The non-transitory computer readable storage medium of claim 16 , wherein the one or more callback functions is invoked for execution within the protected system.
18. The non-transitory computer readable storage medium of claim 16 , wherein the one or more callback functions is invoked for execution outside the protected system.
19. A system, comprising:
a central processing unit;
one or more logical or physical portions of memory communicatively coupled to the central processing unit; and
a computer readable storage device, wherein the computer readable storage device stores instructions to configure the system to interface with an enabling technology logically or physically separate from the system, the enabling technology operable to:
access stored code in the one or more logical or physical portions of memory considered protected areas of memory in the system, wherein read, write, and execute access to at least one of the protected areas of memory is controlled utilizing a control agent separated from a protected system environment via enabling technology, the enabling technology providing an environment for executing code separate from the protected system environment;
initiate execution on the system, by the control agent, of at least a portion of the stored code, the system comprising the protected system environment; and
secure, by the control agent, code and data stored outside the protected areas of memory and within the system utilizing the at least a portion of the stored code.
20. The system of claim 19 , wherein the enabling technology is implemented using one or more of a processor chipset extension, a basic input output system (BIOS) extension, or a virtual machine.
21. The system of claim 19 , wherein the system comprises an operating system and code can execute at a hosting level of the enabling technology without being affected by code executing under control of the operating system of the system.
22. The system of claim 19 , wherein the enabling technology monitors memory within the system and separate from the protected areas of memory.
23. The system of claim 22 , wherein the enabling technology provides one or more callback functions based on access to the monitored memory.
24. The system of claim 19 , wherein the enabling technology provides one or more callback functions invoked based on an occurrence of a predetermined event.
25. The system of claim 24 , wherein the one or more callback functions is invoked for execution outside the system.