SecurAble 1.0.2570.1 is a Diagnostic Software product from grc.com, get 5 Stars SoftSea Rating, Modern processors incorporate features beneficial to security. SecurAble displays the status of the three most significant security-related processor features:
SecurAble probes the system's processor to determine the presence, absence and operational status of three modern processor features:
* 64-bit instruction extensions,
* Hardware support for detecting and preventing
* the execution of code in software data areas, ... and
* Hardware support for system resource "virtualization."
Modern processor hardware can be instructed to designate regions of memory as non-executable. This means that the memory can be used to store reference data to be read and written, but that the processor cannot treat the contents of the memory as software code to be directly executed. Intel calls this ability in their newer processors XD for "eXecute Disable" and AMD refers to it as NX for "No eXecute." AMD's marketing materials also sometimes refer to this ability by the annoying marketing term EVP for Enhanced Virus Protection.
As a hardware ability of modern processors this addition is important, but its use depends entirely upon support from the operating system. So when Microsoft introduced support for this into their operating systems, they termed it Hardware DEP for Data Execution Prevention. Support for hardware DEP was introduced into the 32-bit versions of Windows XP with Service Pack 2, into Windows 2003 Server with Service Pack 1, and has always been present in Windows Vista. Unfortunately, however, in every case, hardware DEP support is disabled for all or most of the system's program by default. It does no one any good unless it's turned on.
When hardware DEP support is active, an XD/NX-aware operating system running on an XD/NX-capable and enabled processor will mark all memory regions not explicitly containing executable code as non-executable. This protects the system's "heaps", "stacks", data and communications buffers from inadvertently running any executable code they might contain.
Why would data or communications buffers ever contain executable code . . . because so-called "Buffer Overrun" attacks are the predominant way Internet-connected computers have historically been remotely hacked and compromised. Hackers locate obscure program vulnerabilities which allow them to "overrun" the buffers with their own data. This tricks the computer into executing the hacker's supplied data (which is actually code) contained within that buffer. But if the operating system has marked that Internet communications buffer region of memory as only being valid for containing data and NOT code, the hacker's attack will never get started. Instead, the operating system will display a notice to the user that the vulnerable software is being terminated BEFORE any of the hacker's code has the chance to run.
Anti-Virus and anti-malware program is useful, but as we know, virus signature files must be continually updated to keep A/V program aware of new threats. Significantly, A/V program is unable to protect against unknown viruses and malware intrusions because it searches for known malicious code rather than detecting and blocking potentially malicious behavior. Hardware DEP, on the other hand, when properly configured, hardens the entire system against both known and unknown vulnerabilities by detecting and preventing the behavior of code execution in data buffers.
Buffer overrun vulnerabilities are so difficult to prevent that scores of them are being found and exploited in operating system and application program every day. Taking advantage of modern processor XD/NX abilities is a strong way to fight back and prevent this most common class of Internet vulnerabilities.
* How do 64-bit instructions help with security
64-bit-capable processors have the capability to run the 64-bit versions of Microsoft's substantially more secure XP, Windows 2003, and Vista operating systems. Those operating systems are more secure because Microsoft, having learned many lessons from mistakes in the past, made the firm decision to lock-down their 64-bit OS kernels. The 64-bit Windows kernels actively police themselves to guard against many rootkit-style and other kernel attacks that have caused so many problems for users of the 32-bit Windows operating systems.
These advanced kernel-protection technologies cannot be ported back into current or even future versions of Microsoft's 32-bit operating systems because doing so would "break" so many existing programs and drivers as to make the system impossible to use. Microsoft knows that one day the personal computing industry will have moved over to 64-bit operating systems much as we all once moved from the 16-bit based systems to 32-bits.
SecurAble indicates by displaying either a "32" or a "64" whether the system's processor has the 64-bit instructions or extensions necessary to run 64-bit versions of Microsoft's present and future operating systems.
* How does Hardware DEP help with security
As was mentioned in the boxes above, hardware support for DEP is the single most exciting and potentially strong technology for detecting, blocking, and preventing all manner of exploitation of "unchecked buffer" buffer overruns in Windows. Hardware-enforced DEP is the malicious hacker's worst nightmare since it has the potential to catch and stop nearly all Internet-style remote communications buffer overflow attacks.
* How does Hardware Virtualization help with security
"Virtual Machine" technology is used to create fully contained environments that can be used to insulate the real hosting operating system from any actions taken by program running within the "virtual" environment. Although this security benefiting virtual machine technology has been used for many years, its widespread adoption has been slowed down by the significant performance overhead imposed by program emulation of the virtual environment. Intel's and AMD's native hardware support for virtual machines means that virtually all of this emulation overhead can be eliminated from both the host and virtual environments. This makes the use of virtual machines for security containment much more practical.
The second benefit of hardware support is that even malicious program running with maximum privileges in the system's kernel is unable to escape from virtual containment. Thus, hardware support for virtual machine technology introduces the possibility of creating a "hypervisor" to operate at a hardware-enforced level below the operating system "supervisor" which opens many exciting possibilities for further enhancing the system's security. It will likely be several years before these abilities are offered natively within Windows, but we might expect to see third-party security program publishers taking advantage of these features in the near future.
SecurAble does not require any setup or installation. The executable file can simply be run as a stand-alone Windows or Linux/Wine program. And nothing is left behind in the system after the executable file is deleted. SecurAble "runs clean" and makes no changes to the system registry or file system. This makes it ideal for quickly running on any system - for example at a computer retailer - where you want to determine which security-helping features the system's processor includes.
SecurAble does not require any setup or installation. The executable file can simply be run as a stand-alone Windows or Linux/Wine program. And nothing is left behind in the system after the executable file is deleted. SecurAble "runs clean" and makes no changes to the system registry or file system. This makes it ideal for quickly running on any system - for example at a computer retailer - where you want to determine which security-helping features the system's processor includes.
SecurAble declares its possible need to run kernel-mode code to Windows Vista UAC. The license of this windows utility software is Freeware, you can free download and free use this Windows Utility software.