Dagens Spørsmål & Svar-sesjon kommer til oss med høflighet av SuperUser-en underavdeling av Stack Exchange, en fellesskapsdrevet gruppering av Q & A-nettsteder.
Foto courtesy of Zoltan Horlik.
Spørsmålet
SuperUser leser Krimson vil vite hva koblingen mellom prosessorer og sikkerhet er:
So, I have been on the web for a while today and came across the Intel Xeon processors. In the feature list, it mentions security. I remember in many other places, I’ve seen security somehow linked with processors. Here is the link for the Xeon and here is the page it links to.
As far as I know, processors just execute instructions given to them. So again, what is the link between a processor and security? How can a processor enhance security?
Hva er forbindelsen mellom de to? Og hvis prosessoren bidrar til sikkerheten til systemet ditt, hva gjør det da som hjelper brukeren?
Svaret
SuperUser bidragsytere Journeyman Geek og chritohnide har svaret for oss. Først opp, Journeyman Geek:
A lot of newer processors have parts of their core dedicated to doing AES instructions. This means the ‘cost’ of encryption, in terms of power and processor use is less, since these parts do that one job more efficiently and faster. This means it is easier to encrypt things, and as such you have better security.
You can use this for things like OpenSSL, or encrypting the hard drive, or any library designed to use it, with less of a hit on performance for regular tasks.
Etterfulgt av svaret fra chritohnide:
Modern processors incorporate various protection techniques which facilitate an increase in the overall security of the system.
One example is the flagging of data areas in memory as No-eXecute in order to prevent over- and under-run vulnerabilities.
An older and more fundamental capability are the protection mechanisms provided by the virtual memory management system. The very nature of the conventional VMM techniques prevent one process from accessing another process’s memory.
Har du noe å legge til forklaringen? Lyder av i kommentarene. Vil du lese flere svar fra andre tech-savvy Stack Exchange-brukere? Sjekk ut hele diskusjonstråden her.
