DEP and Carrot protects windows 7 user data security

For computer security, some people say that software cost-effective, some people say the most secure with hardware, if the carrot and stick, then computer security is what? Data Execution Protection (DEP) in Windows 7 gives users hands-on experience of the security experience that comes with hardware and software fists.

Data Execution protection is understood to be a set of hardware and software technologies that can perform additional checks on memory to help prevent malicious code from running on the system. In fact, users are back in Microsoft Windows XP Service Pack 2, Microsoft Windows Server 2003 Service Pack 1, Microsoft Windows XP Tablet PC E In dition 2005 and Microsoft Windows Vista, DEP has been placed to protect your security, and some people may not be familiar with it.

Unlike antivirus programs, the purpose of hardware and software to implement DEP technology is not to prevent unwanted programs from being installed on your computer. Instead, monitor your installed programs to help determine if they are using system memory securely. To monitor your program, hardware-enforced DEP will track areas of memory that have been designated as "not executable." If you have specified memory as not executable, but a program tries to execute code through memory, Windows closes the program to prevent malicious code. This is done regardless of whether the code is malicious or not.

There are two ways to implement Microsoft DEP, which is hardware-enforced DEP and software-enforced DEP.

Hardware-enforced DEP requires processor support, but most processors now support DEP. In line with Microsoft's DEP features, Intel has made technical improvements to its own CPUs. Intel has developed the "Execute Disable Bit" (EDB) memory protection technology for its own CPU. AMD, along with Microsoft, has also developed AMD's new chip feature, "Enhanced Virus Protection" (EVP Enhanced virus protection).

So how do you know if your processor supports DEP? To do this: Right-click the computer icon on the desktop, select Properties, and click the Advanced System Settings link in the Open System window to open the System Properties panel. On the Advanced tab page, under Performance, click Settings to open the Performance Options panel. Click on the Data Execution Protection tab, where we can confirm that the processor on your computer supports DEP.

If supported, the Windows 7 system displays "Your computer's processor supports hardware-based DEP" on the line at the bottom of the Performance Options dialog box. If not supported, displays "hardware-based DEP is not supported on your computer's processor."

Even if your processor does not support hardware-enforced DEP, there is no tension, and software-enforced DEP. Software enforced DEP is provided by a set of special pointers that the Windows operating system automatically adds to the saved data objects in system memory, and it performs additional checks on the exception handling mechanism in Windows. If the program's image file is created with security architecture exception handling (SafeSEH), software-enforced DEP ensures that the exception handler is registered in the feature table located in the image file before scheduling the exception. If the program's image file is not created with SafeSEH, then software-enforced DEP ensures that the exception handler is in the memory area marked as executable before the exception is dispatched.

To do this, open the Windows 7 System Control Panel, locate and open performance options, select Data Execution protection and select Start DEP for basic Windows programs and services only, and then click OK to start the software forced DEP operation.