Systems and methods for software integrity assurance via validation using build-time integrity windows
In accordance with embodiments of the present disclosure, an article of manufacture may include a non-transitory computer readable medium and computer-executable instructions carried on the computer readable medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to receive software code for an executable file, receive a configuration file, output an executable file based on the software code and the configuration file, the executable file comprising one or more integrity windows of code embedded within the software code and not affecting operation of software code within the executable file, and output a map file setting forth metadata regarding the integrity windows.
1. An article of manufacture comprising:
a non-transitory computer readable medium; and
computer-executable instructions carried on the computer readable medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to:
receive software code for an executable file;
receive a configuration file;
output the executable file based on the software code and the configuration file, the executable file comprising one or more integrity windows of code embedded within the software code and not affecting operation of software code within the executable file; and
output a map file setting forth metadata regarding the integrity windows, wherein the map file is usable by integrity assurance software to assure integrity of signature validation software by injecting data into the one or more integrity windows of the executable file and determining whether the signature validation software validates the executable file as modified by the injected data.
2. The article of claim 1 , wherein one or more integrity windows comprise no operation instructions.
3. The article of claim 1 , wherein the metadata comprises at least one of addresses for the one or more integrity windows and sizes of the one or more integrity windows.
4. The article of claim 1 , wherein the configuration file sets forth one or more parameters for creating the one or more integrity windows within the executable file, including at least one of sizes of the one or more integrity windows, address locations of the one or more integrity windows, and a number of the one or more integrity windows.
5. The article of claim 1 , wherein the executable file comprises a basic input/output system.
6. A method comprising:
receiving software code for an executable file;
receiving a configuration file;
outputting the executable file based on the software code and the configuration file, the executable file comprising one or more integrity windows of code embedded within the software code and not affecting operation of software code within the executable file; and
outputting a map file setting forth metadata regarding the integrity windows, wherein the map file is usable by integrity assurance software to assure integrity of signature validation software by injecting data into the one or more integrity windows of the executable file and determining whether the signature validation software validates the executable file as modified by the injected data.
7. The method of claim 6 , wherein the one or more integrity windows comprise no operation instructions.
8. The method of claim 6 , wherein the metadata comprises at least one of addresses for the one or more integrity windows and sizes of the one or more integrity windows.
9. The method of claim 6 , wherein the configuration file sets forth one or more parameters for creating the one or more integrity windows within the executable file, including at least one of sizes of the one or more integrity windows, address locations of the one or more integrity windows, and a number of the one or more integrity windows.
10. The method of claim 6 , wherein the executable file comprises a basic input/output system.
11. An article of manufacture comprising:
a non-transitory computer readable medium; and
computer-executable instructions carried on the computer readable medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to:
receive a map file setting forth metadata regarding one or more integrity windows of code embedded within software code of an executable file, wherein the code of the one or more integrity windows does not affect operation of software code within the executable file;
based on the map file, inject data into the one or more integrity windows of the executable file; and
determine whether signature validation software for validating the executable file validates the executable file as modified by the injected data.
12. The article of claim 11 , wherein the metadata comprises at least one of addresses for the one or more integrity windows and sizes of the one or more integrity windows.
13. The article of claim 11 , wherein the executable file comprises a basic input/output system.
14. A method comprising:
receiving a map file setting forth metadata regarding one or more integrity windows of code embedded within software code of an executable file, wherein the code of the one or more integrity windows does not affect operation of software code within the executable file;
based on the map file, injecting data into the one or more integrity windows of the executable file; and
determining whether signature validation software for validating the executable file validates the executable file as modified by the injected data.
15. The method of claim 14 , wherein the metadata comprises at least one of addresses for the one or more integrity windows and sizes of the one or more integrity windows.
16. The method of claim 14 , wherein the executable file comprises a basic input/output system.