▼
Showing posts with label Windows. Show all posts
Showing posts with label Windows. Show all posts
Thursday, December 11, 2014

New security feature - Control Flow Guard (CFG) - available in Visual Studio 2015 Preview

›
This blog announced that  the Preview for Visual Studio 2015 includes a new, work-in-progress feature, called Control Flow Guard (CFG). 
Tuesday, November 18, 2014

Anybody knows How to Legitimately Register a PMI (PMU Performance Monitor Interrupt) Callback Handler on Windows OS?

›
According to IA32/Intel Software Development Manual, when some PMU (Performance Monitor Unit) counter overflows occur, or LBR (Last Branch R...
4 comments:

Page Table Structure Corruption Attacks - How to Mitigate it?

›
On x86 and many other processor architectures (with MMU), page tables are critical data structures for address translations. And many hardwa...
Monday, November 17, 2014

Implement software-based SMEP with Non-Execute (NX) bit in page tables to secure kernel/user virtual memory address space.

›
In my previous post , I talked about how to implement a software-based SMEP ( S upervisor Mode Execution Protection ) with virtualization/hy...
10 comments:
Monday, November 03, 2014

Debugging Bug Check (BSOD) 0x101 CLOCK_WATCHDOG_TIMEOUT in a Hypervisor/VMM Environment

›
I'm planning to write a post for debugging  Bug Check 0x101 issue (CLOCK_WATCHDOG_TIMEOUT) in Windows system. but I happened to find th...
Sunday, October 26, 2014

An OS Kernel Bug in Windows 8.1 32-bit OS When Handling Task Switch Events

›
I'm not sure if this kernel bug that I reported in last year has been fixed in the latest Win8.1 32bit system. The bug is : any  NMI (N...
Friday, February 21, 2014

Monitoring Windows OS scheduling events in a noninvasive way with Hardware Virtualization technology (Anti-Rootkit)

›
A rootkit is a stealthy type of software, typically malicious, designed to hide the existence of itself or certain processes/programs from ...