二進制安位處理

Newer processors are able to contribute to the security of your system, but what exactly do they do to help? Today’s Super User Q&A post looks at the link between processors and system security.

較新的處理器能夠為您的系統安全做出貢獻，但是它們究竟能起到什么作用呢？ 今天的超級用戶問答環節著眼于處理器與系統安全性之間的聯系。

Today’s Question & Answer session comes to us courtesy of SuperUser—a subdivision of Stack Exchange, a community-driven grouping of Q&A web sites.

今天的“問答”環節由SuperUser提供，它是Stack Exchange的一個分支，該社區是由社區驅動的Q＆A網站分組。

Photo courtesy of Zoltan Horlik.

圖片由Zoltan Horlik提供。

問題 (The Question)

SuperUser reader Krimson wants to know what the link between processors and security is:

超級用戶讀者Krimson想知道處理器和安全性之間的聯系是什么：

So, I have been on the web for a while today and came across the Intel Xeon processors. In the feature list, it mentions security. I remember in many other places, I’ve seen security somehow linked with processors. Here is the link for the Xeon and here is the page it links to.

因此，我今天已經上網了一段時間，遇到了英特爾至強處理器。 在功能列表中，它提到了安全性。 我記得在許多其他地方，我已經看到安全性以某種方式與處理器相關聯。 這是Xeon的鏈接，也是它鏈接到的頁面。

As far as I know, processors just execute instructions given to them. So again, what is the link between a processor and security? How can a processor enhance security?

據我所知，處理器只是執行給他們的指令。 那么，處理器與安??全性之間又是什么聯系呢？ 處理器如何增強安全性？

What is the connection between the two? And if the processor is contributing to the security of your system, then what is it doing that helps the user?

兩者之間有什么聯系？ 并且，如果處理器為您的系統安全做出了貢獻，那么它將為用戶帶來什么幫助呢？

答案 (The Answer)

SuperUser contributors Journeyman Geek and chritohnide have the answer for us. First up, Journeyman Geek:

超級用戶貢獻者Journeyman Geek和chritohnide為我們找到了答案。 首先，《 Journeyman Geek》：

A lot of newer processors have parts of their core dedicated to doing AES instructions. This means the ‘cost’ of encryption, in terms of power and processor use is less, since these parts do that one job more efficiently and faster. This means it is easier to encrypt things, and as such you have better security.

許多更新的處理器的核心部分專門用于執行AES指令。 這意味著就功耗和處理器使用而言，加密的“成本”更低，因為這些部分可以更高效，更快地完成一項工作。 這意味著更容易加密事物，因此您具有更好的安全性。

You can use this for things like OpenSSL, or encrypting the hard drive, or any library designed to use it, with less of a hit on performance for regular tasks.

您可以將其用于諸如OpenSSL，加密硬盤或任何旨在使用它的庫之類的事情，而對常規任務的性能影響較小。

Followed by the answer from chritohnide:

后面是chritohnide的回答：

Modern processors incorporate various protection techniques which facilitate an increase in the overall security of the system.

現代處理器采用了各種保護技術，可以提高系統的整體安全性。

One example is the flagging of data areas in memory as No-eXecute in order to prevent over- and under-run vulnerabilities.

一個示例是將內存中的數據區域標記為No-eXecute ，以防止運行過度和運行不足漏洞。

An older and more fundamental capability are the protection mechanisms provided by the virtual memory management system. The very nature of the conventional VMM techniques prevent one process from accessing another process’s memory.

虛擬內存管理系統提供的保護機制是一種更古老，更基本的功能。 傳統VMM技術的本質是阻止一個進程訪問另一進程的內存。

---

---

Have something to add to the explanation? Sound off in the comments. Want to read more answers from other tech-savvy Stack Exchange users? Check out the full discussion thread here.

有什么補充說明嗎？ 在評論中聽起來不錯。 是否想從其他精通Stack Exchange的用戶那里獲得更多答案？ 在此處查看完整的討論線程。

翻譯自: https://www.howtogeek.com/182671/what-is-the-link-between-processors-and-security/

二進制安位處理