SIMPLE IS BETTER
(Move to ...)
About me
Twitter
Github
▼
Showing posts with label
Linux
.
Show all posts
Showing posts with label
Linux
.
Show all posts
Monday, November 17, 2014
Implement software-based SMEP with Non-Execute (NX) bit in page tables to secure kernel/user virtual memory address space.
›
In my previous post , I talked about how to implement a software-based SMEP ( S upervisor Mode Execution Protection ) with virtualization/hy...
10 comments:
Sunday, November 02, 2014
Security OS Design (cont.): Write Protection for Linux Kernel critical data structures (GDT, IDT, syscall table, task_strcture, mm_struct,...)
›
To be continued for previous post , let me review what must be changed in Linux kernel in order to prevent buffer overrun/overflow attacks f...
Thursday, October 16, 2014
Is this a good security design in Linux kernel? -- connections between thread_info and kernel stack
›
In Linux kernel, thread_info is a small CPU-specific data structure that stores some low-level task data for corresponding process, it also...
›
Home
View web version
.png)