DEFENSIVE TECHNIQUES TO INCREASE COMPUTER SECURITY

摘要

A computer-implemented method includes initializing a first descriptor tableassociated with a first permission leveland a second descriptor table associated with a second permission leveldifferent from the first. The first and second descriptor tablesare associated with a hardware processor and initialized by an operatingsystem kernel. In response to a descriptor table address requestoriginating from a software process, a memory address associated with thefirst descriptor table is provided, while in responseto a descriptor table update request, the second descriptor table is updated.