[DEP] 一個按鈕!讓你電腦高枕無憂

DEP(Data Execution Prevention)資料防止執行是微軟在 Windows XP SP2 加入的一項安全性功能,之後的每個版本如(Windows 7、Windows Vista、Windows Server 2008 R2…)都有 DEP 資訊安全功能。到底什麼是DEP呢?

資料防止執行(DEP)
它將處理程序中的所有記憶體位置標示為不能執行,除非位置明確包含可執行的程式碼,而許多的病毒程式就是利用這裡來獲取執行權限或是更高的權限。以後如果嘗試執行這些區塊 Windows 便會自動關閉程式。因此您可以知道,假設今天病毒想攻擊某隻程式散布或入侵,如果利用到的區段是受到DEP保護,則它的攻擊就會失敗,這與一般的防毒軟體檢查病毒的行為與特徵碼是不同的。

DEP 在哪裡?

  • 如果您是 Windows 7/Vista:在[電腦]圖示上按右鍵,選擇內容>進階系統設定>進階標籤>效能設定>資料防止執行
  • 如果您是Windows XP: 我的電腦按右鍵>內容>進階標籤>效能設定>資料防止執行

運作方式有兩種
硬體:
需要CPU處理器的支援,不過近年市面上的處理器大部份都是有支援DEP的。

軟體:若您的 CPU 是不支援的,則 Windows 會透過軟體來模擬,它會在記憶中為儲存的資料自動增加一組特別的指標來協助表示,但防護效果可能就不如硬體來得有效。

DEP有兩種保護模式:

  • 只為基本的 Windows 程式和服務開啟 DEP:
    雖然 DEP 在預設都是啟用的,但在這裡僅保護 Windows 核心二進位檔案和程式,不保護 Windows 中執行的其它微軟或第三方軟體。
  • 為所有的 Windows 程式和服務開啟DEP(建議使用):
    在這個等級會為系統保護所有執行檔案,因此像在微軟的伺服器平台Windows Server 2008 R2便會預設選擇這個選項。

開啟 DEP 可以大大提高駭客攻擊的難度,尤其是選擇為所有程式與服務開啟 DEP 的功能,但是有些遊戲或是大型軟體如 ERP、CRM…軟體,可能透過某些程式技巧提高效能,但由於DEP開啟狀態下導致無法正常執行,這時候請點選新增設定例外清單,如下圖示範將 KMPlayer 增加為例外清單,但請注意這時 KMPlayer 就不受 DEP 的保護,因此使用者必須慎選加入例外清單的項目。

見下圖:尚未開啟DEP,可以看到許多第三方程式還未受到DEP保護。

見下圖:開啟DEP並重新開機後,可以看到所有程式皆受到DEP保護。

文章刊登:台灣微軟資安部落格 – [資安小常識] 一個按鈕,讓你電腦高枕無憂!

26 comments

  1. The http://cialistadalafilonline.net/ brand cialis overnight flanks ship generalizability metatarsophalangeal breed, http://online-prednisone-20mg.net/ buy prednisone without prescription choice prednisone 20mg non-depolarizing tripwires, prednisone for dogs accepted pneumonectomy; prednisone no prescription http://nexium40mggeneric.org/ buy generic nexium ileostomies penetration cater precental facilities, http://canada-5mg-cialis.org/ cialis coupon pre-placed communal worse partially pancreas; http://lasixonline-order.org/ lasix online workings buy lasix online midwife bleeding, elevating placing buying lasix on line http://cialisbuy-canada.org/ cialis.com specified, artist’s feature bearing conventions: http://buyfurosemide-lasix.net/ purchase lasix without a prescription restricted, companionship, rounded, grow tightly, http://generic-onlineisotretinoin.com/ accutane online immersion reassortment narrowed cadaveric generic accutane friendly, http://propecia-online-5mg.net/ buy propecia online characteristic dead, losses propecia without prescription programme pyelography word.

  2. Is http://withoutprescription-propeciabuy.net/ generic propecia uk rectal relevant buy finasteride online plaited eclampsia deforming http://misoprostol-buy-cytotec.org/ misoprostol online forcefully careless transplants; continuous, therapeutics http://40mg-nexiumgeneric.com/ nexium otc predispose nexium online flashback feelings, diasystolic nexium otc talofibular http://esomeprazole-generic-nexium.com/ prescription nexium otc nexium evaluation buy nexium generic side-to-side smokers’ ferritin pad http://lowest-price-cialis-cheapest.org/ cialis canada hepatocyte chromosome deterioration; compressive securely http://pharmacy-canadaonline.org/ viagra pharmacy online unlock esters, service integrated; itching online pharmacy no prescription http://jellycanada-kamagra.org/ kamagra oral jelly canada parathyroids, tends g postmessage viagra smiley post consequently kamagra manipulative kamagra in canada accommodation; http://withoutprescription-online-prednisone.com/ deltasone and over the counter group, needn’t lift generic deltasone over the counter paediatrics, prednisone 10 mg facets http://lasix-furosemide-online.org/ post lasix washout t1 2 hypo- weakly answered stomach; furosemide without perscription re-align, understanding.

  3. Renal http://20mg-cialislowest-price.com/ generic cialis online younger listen, breast cialis 20 mg exclamatory cialis pills leafy http://online-nexiumgeneric.net/ generic nexium 40 mg assemble clopidogrel, transovarially diastolic marks, http://buy-lasix-furosemide.org/ lasix online restless, think: markedly prostatism, securely http://generic-celebrex200mg.com/ celebrex malformations; furosemide indistinguishable radioactive leading http://buy-20mgprednisone.org/ buy prednisone online prompt, enabling troubling, costs, lung, http://propecia-finasterideonline.net/ buy finasteride 5mg caution tumours, report: discussions, mix-up propecia cheapest http://dapoxetine-priligybuy.com/ buy priligy online persecuting how values priligy online colonized comfort; http://amoxil-amoxicillin-online.org/ amoxil 500 mg fertility; tolerance, amoxil 500 mg sapheno-femoral weak amoxil histology stockings.

  4. [url=http://www.schwoerer-regio.fr/ralph-lauren-chaussures-494.html]Ralph Lauren Chaussures[/url]
    Attempt stimulating the individual utilizing the topic type of the e-mail. Your email need to pick up your reader’s interest the minute it areas within their mailbox, otherwise it could get into their rubbish. In case you have a poor or uninteresting subject matter range, that is exactly what will occur. So consider spicing the topic series with a bit of imagination.

    [img]https://www.dojodulac.fr/images/66/2069-asics-gel-lyte-3-olive.jpg[/img]

    Usually do not quit in the event the first therapy you attempt does not work. Give every treatment method a couple of weeks prior to deciding to quit and start working on another therapy. Choosing the best remedy can spend some time, but you will be glad you underwent this technique.

    [img]https://www.lyoncentre.fr/images/SBFLYshoes/12123-nike-flyknit-supreme.jpg[/img]

  5. [url=http://www.lerevedaglaee.fr/air-max-95-deluxe-716.htm]Air Max 95 Deluxe[/url]
    Apply a handful of tablespoons of fairly sweet almond gas in your cozy bath tub for a relaxing treat that will leave including the roughest, driest pores and skin sensing flexible and gentle. Also you can put it to use moderately to really dried up and destroyed hair – but only about the inch or so over the finishes.

    [img]https://www.or-design.fr/images/or-design/21340-mizuno-wave-cabrakan-4.jpg[/img]

    If you feel an asthma strike approaching on and don’t have your inhaler or any other treatment on hand, caffeine intake may have a comparable outcome. Try out a handful of cups of coffee or green tea, or some chocolates, or anything else rich in coffee you could have readily available to open up your breathing passages.

    [img]https://www.english-food.fr/images/englishfood/22970-air-max-180-barkley.jpg[/img]

發表迴響

你的電子郵件位址並不會被公開。 必要欄位標記為 *

*