A non-inclusive memory permissions architecture for protection against cross-layer attacks

Protecting modern computer systems and complex software stacks against the growing range of possible attacks is becoming increasingly difficult. The architecture of modern commodity systems allows attackers to subvert privileged system software often using a single exploit. Once the system is compromised, inclusive permissions used by current architectures and operating systems easily allow a compromised high-privileged software layer to perform arbitrary malicious activities, even on behalf of other software layers. This paper presents a hardware-supported page permission scheme for the physical pages that is based on the concept of non-inclusive sets of memory permissions for different layers of system software such as hypervisors, operating systems, and user-level applications. Instead of viewing privilege levels as an ordered hierarchy with each successive level being more privileged, we view them as distinct levels each with its own set of permissions. Such a permission mechanism, implemented as part of a processor architecture, provides a common framework for defending against a range of recent attacks. We demonstrate that such a protection can be achieved with negligible performance overhead, low hardware complexity and minimal changes to the commodity OS and hypervisor code.NPRP grant 4-1593-1-260 from the Qatar National Research Fund.Scopu

Rompiendo las barreras arquitectónicas mediante la arquitectura inclusiva en los centros de educación básica especial para niños con discapacidad intelectual en San Juan de Lurigancho

El objetivo principal de esta investigación es Analizar si la arquitectura inclusiva puede romper las barreras arquitectónicas que se presentan en los centros especializados para niños con discapacidad intelectual en San Juan de Lurigancho, cuyo contenido de su estudio está enfocado en resaltar la importancia del tema de investigación. En esta presente investigación, tiene como característica de ser un enfoque cualitativo y que su diseño es de estudio de casos. El lugar de análisis, esta ubicada en el distrito de San Juan de Lurigancho, los instrumentos que se utilizaron fueron dos guías de entrevista para el arquitecto, ficha de observación y ficha de análisis de contenido