* Thoughts on PatchGuard
posted by Thom Holwerda on Tue 30th Jan 2007 21:28 UTC, submitted by PlatformAgnostic
IconKen Johnson, a Windows kernel mode and debugging guru, analyzes the Windows x64 Kernel Patch prevention system on his blog. From his perspective, PatchGuard is neither a security scheme nor a DRM measure due to the limited scope of the structures it protects. Instead, it is a tool to prevent vendors from destroying system security and stability. Johnson also forecasts a hypervisor-based PatchGuard mechanism for future revisions to this technology. Check out other posts on Nynaeve for a wealth of technical details on Windows mechanisms of interest to reverse-engineers.
e p (0)    7 Comment(s)

Related Articles

* CPU Rings, Privilege, and Protection
posted by Amjith Ramanujam on Mon 25th Aug 2008 21:40
* DefCon 16: Hackers and Gag Order in Sin City
posted by Amjith Ramanujam on Sat 16th Aug 2008 01:04, submitted by sharkscott
* The Sky Isn't Falling: A Look at a New Vista Security Bypass
posted by Amjith Ramanujam on Mon 11th Aug 2008 16:13, submitted by gonzo