Error report normalization

Patent metadata

Field	Value
Publication number	US-10430265-B2
Application number	US-201515514811-A
Country	US
Kind code	B2
Filing date	Oct 1, 2015
Priority date	Oct 1, 2014
Publication date	Oct 1, 2019
Grant date	Oct 1, 2019

Abstract

Error report reporting errors that occur during software execution may be normalized to account for diversification of single software program. A method for useful providing error reports comprises receiving information regarding computer system status at a time of failure of proper execution of a diversified implementation of a computer program, the computer program having a plurality of diversified implementations; and transforming the information regarding the computer system status using metadata indicative of differences between the diversified implementation of the computer program and a canonical implementation of the computer program.

First claim

What is claimed is:

1. A method useful in providing error reports for computer program execution on a computer system, comprising:
receiving information regarding computer system status at a time of failure of proper execution of a diversified implementation of a computer program, the computer program having a plurality of diversified implementations; and
transforming, by at least one computer, the information regarding the computer system status using meta-data indicative of differences between the diversified implementation of the computer program and a canonical implementation of the computer program.

2. The method of claim 1 , wherein the transformed information regarding the computer system status comprises a normalized error report.

3. The method of claim 1 , wherein the canonical implementation of the computer program is one of the plurality of diversified implementations of the computer program.

4. The method of claim 1 , wherein the canonical implementation of the computer program is created prior to creation of the plurality of diversified implementations.

5. The method of claim 2 , wherein the normalized error report reflects implementation details of the canonical implementation.

6. The method of claim 1 , wherein the meta-data indicates differences between at least one Of stack, heap, and register contents on a program location basis between the diversified implementation and the canonical implementation.

7. The method of claim 1 , wherein the computer system transforms the information regarding the computer system status using the meta-data.

8. The method of claim 1 , further comprising transmitting the transformed information regarding the computer system status to a server, and further transforming the transformed information by the server using additional meta-data indicative of differences between the diversified implementation and the canonical implementation.

9. The method of claim 8 , where the further transformed information comprises a normalized error report.

10. The method of claim 1 , further comprising transmitting the information regarding the computer system status to a server, and wherein the server transforms the information regarding the computer system status using the meta-data.

11. A method useful in providing error reports for computer program execution on a computer system, comprising:
receiving information regarding computer system status at a time of failure of proper execution of a diversified implementation of a computer program, the computer program having a plurality of diversified implementations: and
transforming the information regarding the computer system status using meta-data indicative of differences between the diversified implementation of the computer program and a canonical implementation of the computer program, wherein transforming the information regarding the computer system status using meta-data indicative of differences between the diversified implementation and the canonical implementation comprises performing a plurality of transformations in sequence, each transformation other than a last transformation in the sequence producing a partially normalized error report, each of the plurality of transformations using meta-data partially indicative of differences between the diversified implementation and the canonical implementation.

12. The method of claim 11 , wherein at least some of the plurality of transformations are performed on different computers.

13. The method of claim 1 , wherein the transformation is performed by a normalization function, with the normalization function encoding the meta-data.

14. The method of claim 1 , wherein the meta-data is created in conjunction with creation of the diversified implementation.

15. The method of claim 1 , further comprising:
after the time of failure of proper execution of the diversified implementation, generating the meta-data using a seed value used in a process of creating the diversified implementation.

16. A non-transitory computer readable memory storing program instructions, the program instructions comprising program instructions to configure at least one processor to:
receive an error report indicating status of a computer at a time of error in operation of a diversified implementation of a computer program, the computer program having a plurality of diversified implementations; and
at least partially transform, based on meta-data reflecting differences between the diversified implementation of the computer program and a canonical implementation, the error report indicating status of the computer at the time of error in operation of the diversified implementation of the computer program to an at least partially normalized error report that at least partially removes effects of diversification of the computer program that resulted in the diversified implementation of the computer program.

17. The non-transitory computer readable memory storing program instructions of claim 16 , wherein the program instructions include program instructions to only partially transform the error report indicating status of the computer at the time of error in operation of the diversified implementation of the computer program to only a partially normalized error report that only partially removes effects of diversification that resulted in the diversified implementation of the computer program.

18. The non-transitory computer readable memory storing program instructions of claim 16 , wherein the program instructions include program instructions to fully transform the error report indicating status of the computer at the time of error in operation of the diversified implementation of the computer program to a normalized error report that removes all effects of diversification that resulted in the diversified implementation of the computer program.

19. The non-transitory computer readable memory storing program instructions of claim 16 , wherein the meta-data is encoded in the program instructions.

Assignees

• Univ California

Inventors

• Larsen Per
• Brunthaler Stefan
• Franz Michael

Classifications

• G06F11/0775 Primary

  Content or structure details of the error report, e.g. specific table structure, specific error fields · CPC title

• G06F21/54

  by adding security routines or objects to programs · CPC title

• G06F11/0706

  the processing taking place on a specific hardware platform or in a specific software environment · CPC title