Table of Contents
Advertisement
Quick Links
Data Execution Prevention
v1.2
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Data Execution Prevention (DEP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
What does Data Execution Prevention do? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Data Execution Prevention Exception Message Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Hardware-Enforced DEP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
What is PAE? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Why is this change important? What threats does it help mitigate? . . . . . . . . . . . . . . . . . . . 4
Will my NX- or XD-enabled systems protect me from virus attacks? . . . . . . . . . . . . . . . . . . . 5
What are the required components for XD/NX to function? . . . . . . . . . . . . . . . . . . . . . . . . 5
How do I control the DEP functionality on my computer? . . . . . . . . . . . . . . . . . . . . . . . . . . 8
DEP Level Chart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Data Execution Prevention Tab - No XD/NX Processor . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Software-Enforced DEP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Deploying Hardware-Enabled Data Execution Prevention . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
How will XD/NX impact HP customers? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
What about customers who create their own software image? . . . . . . . . . . . . . . . . . . . . . 11
Advantages of using XD/NX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Disadvantages of using XD/NX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Conclusion and Recommendation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Known Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Frequently Asked Questions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
1
Advertisement
Table of Contents
Related Manuals for Compaq dc5100 - Microtower PC
Summary of Contents for Compaq dc5100 - Microtower PC
-
Page 1: Table Of Contents
Data Execution Prevention v1.2 Introduction ............2 Data Execution Prevention (DEP) . -
Page 2: Introduction
Based upon Microsoft TechNet article “Changes to Functionality in Microsoft's Windows XP Service Pack 2,” dated August 9, 2004, by Starr Anderson & Vincent Abella. Introduction Microsoft’s Windows XP Service Pack 2 introduces a set of security technologies that will help improve the ability of computers running Windows XP to withstand malicious attacks, especially those from viruses and worms such as Code Red, Blaster and Sasser. -
Page 3: Data Execution Prevention (Dep)
Data Execution Prevention (DEP) What does Data Execution Prevention do? Data Execution Prevention (DEP) is a set of hardware and software technologies that perform checks on memory to help protect against malicious code and viruses. In Windows XP SP2, DEP is enforced by both hardware and software. -
Page 4: What Is Pae
What is PAE? The XD and NX features require that the processor run in Physical Address Extension (PAE) mode. A 32-bit processor, such as the Intel Pentium 4 (IA32 family), is usually limited to addressing a maximum of 4-GB of memory. This limitation is due to 32 bits of address capability, as follows: = 4,294,967,296 (4 GB) To address more than 4-GB of memory, Intel created PAE mode. -
Page 5: Will My Nx- Or Xd-Enabled Systems Protect Me From Virus Attacks
Will my NX- or XD-enabled systems protect me from virus attacks? XD and NX are promising technologies, but they do not protect against all attacks. You should use XD and NX with antivirus software, firewall, and other security measures to reduce the propagation of viruses and limit the amount of damage they can create. - Page 6 How do I know if I have an XD- or NX- capable processor? The System Properties window indicates whether PAE is enabled on systems installed with Windows XP SP2 that also have an XD- or NX-capable processor. System BIOS • Default XD support is disabled for Intel 915 2004 systems.
- Page 7 The Data Execution Prevention option is disabled by default in i915-based systems, and enabled by default in i945-based systems. Applications and drivers run without compatibility problems when the XD feature is not enabled. HP uses the i915 chipset desktop BIOS family in the following product lines (not all systems available in all regions): •...
-
Page 8: How Do I Control The Dep Functionality On My Computer
How do I control the DEP functionality on my computer? Systems installed with Windows XP SP2 include a Data Execution Prevention tab, located at System Properties > Advanced. This tab allows the user to enable DEP for either: • Essential Windows programs and services only - This option equates to the OptIn policy. Applications can enable DEP protection by creating a compatibility shim (a small piece of software added to a program to provide an enhancement) and installing it with the application. -
Page 9: Dep Level Chart
DEP Level Chart Processor BIOS DEP OS BOOT.INI Result Support Setting Setting Any Setting Only software-enforced DEP is available for limited Windows system binaries. Disabled Any Setting Only software-enforced DEP is available for limited Windows system binaries. • Enabled Always On Hardware and software-enforced DEP coverage for all Windows binaries, programs, and drivers. -
Page 10: Data Execution Prevention Tab - No Xd/Nx Processor
Data Execution Prevention Tab - No XD/NX Processor The following image shows the Data Execution Prevention tab on a system without an XD/NX-enabled processor. Windows notifies the user that the system does not contain a processor capable of XD/NX, but that software-enforced DEP is available. -
Page 11: Deploying Hardware-Enabled Data Execution Prevention
If a program was built with Safe Structured Exception Handling (SafeSEH), then software-enforced DEP can determine if the exception handler is registered in the function table located within the program image file before an exception is dispatched. If a program is not built with SafeSEH, then software- enforced DEP checks whether the exception handler is located within a memory region marked as execut- able before an exception is dispatched. -
Page 12: Advantages Of Using Xd/Nx
Advantages of using XD/NX Enabling XD/NX provides increased protection against viruses that use buffer overflow attacks. This increased protection provides the benefit of increased network security as malicious code cannot propa- gate or spread to infect more computers. Support staff also benefits from much improved containment and easier eradication of unwanted software. -
Page 13: Known Issues
Known Issues The following table provides a list of drivers and applications for which HP has discovered XD compatibil- ity issues during testing. The table also provides a list of Microsoft Knowledge Base articles that address incompatibilities Microsoft has found during testing. Application Effect Workaround/Solution... - Page 14 Application Effect Workaround/Solution (Continued) Intervideo WinDVD. Exception error during installation Add to exclusion list. and runtime. Intervideo WinDVD Creator. Exception error during installation Add to exclusion list for installa- due to Install Shield. tion, can remove afterwards. Java Web Start. Program does not run, but no Add to exclusion list.
- Page 15 Application Effect Workaround/Solution (Continued) Roxio Cineplayer. Exception error during installation Add to exclusion list. and runtime. Roxio Easy Media Creator. Exception error during installation Add to exclusion list. and runtime. Sysmark 2004. Exception error during installation Add to exclusion list. and runtime.
-
Page 16: Frequently Asked Questions
Frequently Asked Questions What is XD? Execute Disable Bit (XD) functionality can prevent certain types of buffer overflow attacks when used with a supporting operating system and system BIOS. XD allows the processor to classify areas in memory where application code can and cannot execute. When a virus or worm attempts to insert code in the buffer, the processor disables code execution, preventing damage or virus or worm propagation. - Page 17 How or where does DEP fit in? DEP works with XD/NX to help prevent execution of malicious code. Will an XD or NX processor work without Windows XP SP2? At this time, XD/NX support requires the following operating systems: • Windows XP SP2 •...
- Page 18 If the XD is disabled by default, how do I turn it on? The BIOS for the i915 chipset-based 2004 and i945-chipset based 2005 desktop systems uses the CPUID instruction to locate the Execute Disable bit to determine if the installed processor supports XD.
- Page 19 Will XD-capable processors cost more? XD/NX-capable chips will be sold at approximately the same or slightly higher cost compared to versions without XD bit. When will they start showing up in the HP desktops I purchase? HP is shipping: • i915 chipset desktop systems with XD disabled in F10 Setup. •...
- Page 20 How will I know if current applications will work? If an application conflicts with DEP, you may see the following error message: Data Execution Prevention – Microsoft Windows To help protect your computer, Windows has closed this program. Name: program name Publisher: program publisher To avoid this behavior, contact your program vendor to see if an update is available that enables the program to work correctly with DEP.
- Page 21 HP, Hewlett Packard, and the Hewlett-Packard logo are trademarks of Hewlett-Packard Company in the U.S. and other countries. Compaq and the Compaq logo are trademarks of Hewlett-Packard Development Company, L.P. in the U.S. and other countries. Microsoft, MS-DOS, Windows, and Windows NT are trademarks of Microsoft Corporation in the U.S. and other countries.
Need help?
Do you have a question about the dc5100 - Microtower PC and is the answer not in the manual?
Questions and answers