0

W^X is a critical security feature, allowing us a chance to perform security analysis on data that some entity on a computer wants to execute.

Windows implements this by requiring a process to call VirtualProtect. Because UEFI rootkits are a problem that can't be solved without hardware enforcement of the DXE drivers (too late for all the devices out in the world already), I'm interested if there are any security mechanisms left to aid us in defending against DXE drivers to monitor for suspicious activity. W^X would be nice.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.