较新的处理器能够提高系统的安全性，但它们究竟有什么帮助呢？今天的超级用户问答文章关注处理器和系统安全之间的联系。

今天的问答环节是由SuperUser提供的，SuperUser是Stack Exchange的一个分支，是一个由社区驱动的问答网站分组。

照片由Zoltan Horlik提供。

问题

超级用户读者Krimson想知道处理器和安全性之间的联系是什么：

So, I have been on the web for a while today and came across the Intel Xeon processors. In the feature list, it menti*** security. I remember in many other places, I’ve seen security somehow linked with processors. Here is the link for the Xeon and here is the page it links to.

As far as I know, processors just execute instructi*** given to them. So again, what is the link between a processor and security? How can a processor enhance security?

两者之间有什么联系？如果处理器有助于系统的安全性，那么它是如何帮助用户的呢？

答案

超级用户贡献者Journeyman Geek和chritohnide为我们提供了答案。首先，熟练工极客：

A lot of newer processors have parts of their core dedicated to doing AES instructi***. This means the ‘cost’ of encryption, in terms of power and processor use is less, since these parts do that one job more efficiently and faster. This means it is easier to encrypt things, and as such you have better security.

You can use this for things like OpenSSL, or encrypting the hard drive, or any library designed to use it, with less of a hit on performance for regular tasks.

接着是chritohnide的回答：

Modern processors incorporate various protection techniques which facilitate an increase in the overall security of the system.

One example is the flagging of data areas in memory as No-eXecute in order to prevent over- and under-run vulnerabilities.

An older and more fundamental capability are the protection mechani**s provided by the virtual memory management system. The very nature of the conventional VMM techniques prevent one process from accessing another process’s memory.

有什么要补充的解释吗？在评论中发出声音。想从其他精通技术的Stack Exchange用户那里了解更多答案吗？在这里查看完整的讨论主题。