Mitigating CPU Vulnerabilities: Removing the OS Blindfold
OS Level Solutions Are Not Enough The recent Meltdown and Spectre vulnerabilities target weaknesses of the CPU rather than the Operating System, or the applications that run on it. (See here for background on how these vulnerabilities work). Since they do not involve the Operating System, solutions that monitor at that level, such as traditional sandboxes, will be incapable of detecting these types of attack. A lower level framework is required in order to properly identify and mitigate these attacks. Using The CPU Level Framework To Mitigate The Spectre and Meltdown…
Read More