Preventing execution of unauthorized software on a given computer plays a pivotal role in system security. The key problem is that although a program at the beginning of its execution can be verified as authentic, its execution flow can be redirected to externally injected malicious code using, for example, a buffer overflow exploit. This paper introduces a novel, simplified, hardware-assisted intrusion prevention platform. Central to this paper is the proposal of a novel optimization technique that initially identifies instructions that are likely to stall execution, and reorders basic blocks within a given instruction block to minimize the execution overhead.
Did you find this white paper useful?
21 out of 33 users found this white paper useful
Related white papers
Balancing Security Against Productivity
What makes for great security? Is it about keeping the bad guys out or letting the good guys in? About defending attacks or preventing them? When IDG Research Services queried...
Secure Desktop On-Demand Webcast
The desktop or endpoint is one of the most vulnerable parts of your environment. Threats are everywhere. You have users who love to experiment with device settings (only to wonder...
Novell Zenworks Endpoint Security Management: Total Control from a Single Console
Still super gluing your USB ports shut? Unauthorized access to networks, lost or stolen laptops and other mobile hardware, and theft of proprietary information or intellectual property accounted for more...
Credit Union Optimizes Infrastructure to Gain Efficiency, Attain Carbon-Neutral Status
Vancity, Canada's largest credit union, needed to increase efficiency. The credit union turned to technology to support its efforts and opted to standardize on Microsoft technologies because of their usability...
Software From the SAP for Defense & Security Solution Portfolio Paves the Way for NATO's Next-Generation Command and Control Systems
During the Coalition Warrior Interoperability Demonstration (CWID) exercises in 2005 and 2006, conducted by NATO Allied Command Transformation (ACT), SAP experts successfully demonstrated the effectiveness of software from the SAP...
New Identity & Access (IDA) Technologies in Windows Server 2008
Identity and access is the critical piece in a connected infrastructure of an organization and has become a means to increase security, decrease operational costs, satisfy regulatory requirements, and deepen...
Aquarium Enhances Data Access, Security, and Productivity With New Operating System
The National Aquarium in Baltimore, one of the premier aquatic resources in the United States, presents 16,000 specimens in an award-winning 250,000-square-foot facility. Limited office space required some staffers to...
