▼
Showing posts with label SMEP. Show all posts
Showing posts with label SMEP. Show all posts
Monday, December 15, 2014

Using LBR (Last Branch Record) feature to detect ret2usr (return-to-user) attack w/ MMU paging structure corruption

›
SMEP (Supervisor Mode Execution Prevention) is a mitigation that aims to prevent the CPU from running code from user-mode while in kernel-mo...
Tuesday, November 18, 2014

Page Table Structure Corruption Attacks - How to Mitigate it?

›
On x86 and many other processor architectures (with MMU), page tables are critical data structures for address translations. And many hardwa...
Monday, November 17, 2014

Implement software-based SMEP with Non-Execute (NX) bit in page tables to secure kernel/user virtual memory address space.

›
In my previous post , I talked about how to implement a software-based SMEP ( S upervisor Mode Execution Protection ) with virtualization/hy...
10 comments:
Wednesday, November 12, 2014

How to Implement a software-based SMEP(Supervisor Mode Execution Protection) with Virtualization/Hypervisor Technology

›
As my previous post indicated, SMEP is a powerful security feature, and easy to deploy in modern commodity OS. However this feature require...
Tuesday, May 06, 2014

Introduction to Processor Hardware Security Features in x86 & ARM Architectures

›
x86 and ARM processors both provide many hardware enforced security features, e.g. NX (No-eXecute) for executable space protection , to help...