Executable Space Protection

In computer security, executable space protection is the marking of memory regions as non-executable, such that an attempt to execute machine code in these regions will cause an exception. It makes use of hardware features such as the NX bit.

The Burroughs 5000 offered hardware support for executable space protection when it was introduced in 1961; that capability was retained in its successors at least through 2006. In its implementation of tagged architecture, each word of memory had an associated, hidden tag bit designating it code or data. Thus, user programs cannot write or even read a program word, and data words cannot be executed.

If an operating system can mark some or all writable regions of memory as non-executable, it may be able to prevent the stack and heap memory areas from being executable. This helps to prevent certain buffer overflow exploits from succeeding, particularly those that inject and execute code, such as the Sasser and Blaster worms. These attacks rely on some part of memory, usually the stack, being both writable and executable; if it is not, the attack fails.

Read more about Executable Space Protection:  OS Implementations

Famous quotes containing the words space and/or protection:

    The true gardener then brushes over the ground with slow and gentle hand, to liberate a space for breath round some favourite; but he is not thinking about destruction except incidentally. It is only the amateur like myself who becomes obsessed and rejoices with a sadistic pleasure in weeds that are big and bad enough to pull, and at last, almost forgetting the flowers altogether, turns into a Reformer.
    Freya Stark (1893–1993)

    No: until I want the protection of Massachusetts to be extended to me in some distant Southern port, where my liberty is endangered, or until I am bent solely on building up an estate at home by peaceful enterprise, I can afford to refuse allegiance to Massachusetts, and her right to my property and life. It costs me less in every sense to incur the penalty of disobedience to the State than it would to obey. I should feel as if I were worth less in that case.
    Henry David Thoreau (1817–1862)