D3FEND 技术详情

D3-ABPI

D3-ABPI

Application-based Process Isolation

定义

Application code which prevents its own subroutines from accessing intra-process / internal memory space.

父技术
子技术
关联构件
Process
Process

A process is an instance of a computer program that is being executed. It contains the program code and its current activity. Depending on the operating system (OS), a process may be made up of multiple threads of execution that execute instructions concurrently. A computer program is a passive collection of instructions, while a process is the actual execution of those instructions. Several processes may be associated with the same program; for example, opening up several instances of the same program often means more than one process is being executed.

Subroutine
Subroutine

In different programming languages, a subroutine may be called a procedure, a function, a routine, a method, or a subprogram. The generic term callable unit is sometimes used.

语义关系
出向isolatesProcess
出向kb referenceReference - Private application access with browser isolation
出向kb referenceReference - Protecting web applications from untrusted endpoints using remote browser isolation
出向kb referenceReference - Site Isolation Design Document
出向restrictsSubroutine