Hitman Pro uses debug feature Intel CPUs to protect users




A new version of the Alert function Hitman Pro uses a debug feature in Intel Core chips and newer Atom CPUs to protect users against return oriented programming. The new version also protects against more ransomware and against badusb -exploits.

The new version of the software, made ​​by Dutch company SurfRight, the load used branch record feature Intel Core i chipsets and newer Atom chipsets to track jumps in memory. “Basically it’s a debug feature,” says Erik Loman of SurfRight. The debug mode is enabled when you install Hitman Pro to prevent return oriented programming.

In that attack technique existing machine instructions of a program executed in a specific sequence chosen by the attacker, so he can build his own code. Normally this should be prevented by Data Execution Prevention, which prevents writable memory is performed by the user, and address space layout randomization, in which memory addresses are randomly divided to make it harder for attackers to refer to it.

Using the debug option can Hitman Pro track which jumps are made in memory. According Loman of SurfRight provides the function virtually no overhead, because the processor jumps itself maintains and writes to its own registry. We also preserve the last sixteen jumps. That need to be read by the software.


In: A Technology & Gadgets Asked By: [19122 Red Star Level]

Answer this Question

You must be Logged In to post an Answer.

Not a member yet? Sign Up Now »