D3FEND 技术详情

D3-SSC

D3-SSC

Shadow Stack Comparisons

定义

Comparing a call stack in system memory with a shadow call stack maintained by the processor to determine unauthorized shellcode activity.

父技术
子技术
关联构件
StackFrame
Stack Frame

A machine-dependent and application-binary-dependent (ABI-dependent) data structure containing subroutine state information including the arguments passed into the routine, the return address back to the routine's caller, and space for local variables of the routine.

语义关系
出向analyzesStack Frame
出向kb referenceReference - Threat detection for return oriented programming - Crowdstrike Inc