Glen A Simpson

US Patent:

20210319104, Oct 14, 2021

Filed:

Apr 10, 2020

Appl. No.:

16/845540

Inventors:

- Palo Alto CA, US
Glen Robert SIMPSON - Palo Alto CA, US

International Classification:

G06F 21/56
G06F 3/06

Abstract:

Certain embodiments described herein relate to methods and systems for detecting unexpected behavior associated with a process. In certain embodiments, a method comprises receiving a memory allocation request, the request indicating one or more memory segments to be allocated in memory of a computing system. The method further comprises allocating the one or more memory segments in the memory based on the memory allocation request. The method further comprises allocating one or more decoy memory segments in the memory based on the memory allocation request. The method further comprises trapping an input/output (I/O) operation. The method further comprises detecting an unexpected behavior associated with the I/O operation based on determining that the I/O operation impacts at least one of the one or more decoy memory segments. The method further comprises performing one or more actions based on the detection.