09292417 is referenced by 5 patents and cites 27 patents.

Methods and systems allow the use of hypervisors to use software breakpoints in the same manner as hardware breakpoints. A program to be tested is executed by a hypervisor running a virtual machine. A memory page containing the location of a breakpoint is copied to a temporary memory page. Then a new page is written containing breakpoint instructions at specified memory locations. The new page is tagged as execute only, so the program to be tested is unaware of any changes to the program. If the program attempts to read from the changed memory page, it will read from the temporary memory page instead. Such a method can be used to search websites for malware in relative safety because of the inability of the malware to write to memory locations that are located on a page that is execute only.

Title
System and method for hypervisor breakpoints
Application Number
13/961190
Publication Number
9292417 (B2)
Application Date
August 7, 2013
Publication Date
March 22, 2016
Inventor
Ryan C Salsamendi
Sunnyvale
CA, US
Agent
Schwegman Lundberg & Woessner P A
Assignee
Raytheon Cyber Products
VA, US
IPC
G06F 21/56
G06F 21/52
G06F 11/36
G06F 12/14
G06F 9/455
G06F 11/00
G06F 9/44
View Original Source