二进制安位处理_处理器与安全性之间的联系是什么？

二进制安位处理

what-is-the-link-between-processors-and-security-00

Newer processors are able to contribute to the security of your system, but what exactly do they do to help? Today’s Super User Q&A post looks at the link between processors and system security.

较新的处理器能够为您的系统安全做出贡献，但是它们究竟能起到什么作用呢？今天的超级用户问答环节着眼于处理器与系统安全性之间的联系。

Today’s Question & Answer session comes to us courtesy of SuperUser—a subdivision of Stack Exchange, a community-driven grouping of Q&A web sites.

今天的“问答”环节由SuperUser提供，它是Stack Exchange的一个分支，该社区是由社区驱动的Q＆A网站分组。

Photo courtesy of Zoltan Horlik.

图片由Zoltan Horlik提供。

问题 (The Question)

SuperUser reader Krimson wants to know what the link between processors and security is:

超级用户读者Krimson想知道处理器和安全性之间的联系是什么：

So, I have been on the web for a while today and came across the Intel Xeon processors. In the feature list, it mentions security. I remember in many other places, I’ve seen security somehow linked with processors. Here is the link for the Xeon and here is the page it links to.

因此，我今天已经上网了一段时间，遇到了英特尔至强处理器。在功能列表中，它提到了安全性。我记得在许多其他地方，我已经看到安全性以某种方式与处理器相关联。这是Xeon的链接，也是它链接到的页面。

As far as I know, processors just execute instructions given to them. So again, what is the link between a processor and security? How can a processor enhance security?
据我所知，处理器只是执行给他们的指令。那么，处理器与安全性之间又是什么联系呢？处理器如何增强安全性？

What is the connection between the two? And if the processor is contributing to the security of your system, then what is it doing that helps the user?

两者之间有什么联系？并且，如果处理器为您的系统安全做出了贡献，那么它将为用户带来什么帮助呢？

答案 (The Answer)

SuperUser contributors Journeyman Geek and chritohnide have the answer for us. First up, Journeyman Geek:

超级用户贡献者Journeyman Geek和chritohnide为我们找到了答案。首先，《 Journeyman Geek》：

A lot of newer processors have parts of their core dedicated to doing AES instructions. This means the ‘cost’ of encryption, in terms of power and processor use is less, since these parts do that one job more efficiently and faster. This means it is easier to encrypt things, and as such you have better security.

许多更新的处理器的核心部分专门用于执行AES指令。这意味着就功耗和处理器使用而言，加密的“成本”更低，因为这些部分可以更高效，更快地完成一项工作。这意味着更容易加密事物，因此您具有更好的安全性。

You can use this for things like OpenSSL, or encrypting the hard drive, or any library designed to use it, with less of a hit on performance for regular tasks.
您可以将其用于诸如OpenSSL，加密硬盘或任何旨在使用它的库之类的事情，而对常规任务的性能影响较小。

Followed by the answer from chritohnide:

后面是chritohnide的回答：

Modern processors incorporate various protection techniques which facilitate an increase in the overall security of the system.

现代处理器采用了各种保护技术，可以提高系统的整体安全性。

One example is the flagging of data areas in memory as No-eXecute in order to prevent over- and under-run vulnerabilities.

一个示例是将内存中的数据区域标记为No-eXecute ，以防止运行过度和运行不足漏洞。

An older and more fundamental capability are the protection mechanisms provided by the virtual memory management system. The very nature of the conventional VMM techniques prevent one process from accessing another process’s memory.
虚拟内存管理系统提供的保护机制是一种更古老，更基本的功能。传统VMM技术的本质是阻止一个进程访问另一进程的内存。

Have something to add to the explanation? Sound off in the comments. Want to read more answers from other tech-savvy Stack Exchange users? Check out the full discussion thread here.

有什么补充说明吗？在评论中听起来不错。是否想从其他精通Stack Exchange的用户那里获得更多答案？在此处查看完整的讨论线程。