Win7 data execution protection function DEP to achieve memory monitoring unknown program running

The normal program operation can not be separated from the use of memory, and the operation of malicious programs can not be separated from the use of memory. If you protect the memory space, let the programs you trust run unimpeded in the memory space, and monitor the operation of the unknown program in memory. In this way, the process of using the computer becomes safe and controllable. We can do this with the Data Execution Prevention (DEP) provided by the Windows 7 system.

Data Execution Prevention (DEP) is a security feature that helps protect your computer from viruses and other security threats. The computer program leaves a portion of the computer's memory for data, leaving another portion of the memory for instructions used by the program. A hacker can attempt to trick a program into running (or executing) harmful data that is placed in the computer's memory and pretending to be an instruction. This may give hackers control over your computer. DEP helps protect your computer by monitoring programs to ensure they use your computer's memory safely. If DEP notices that a program is trying to run an instruction from the memory portion used for data, DEP closes the program and notifies you.

To use this feature, we first need to know if the software to be used provides a DEP-compatible version or update of the program, and then change the DEP settings. If the software publisher provides a version of the software that is compatible with DEP, installing and opening DEP can be protected by DEP. However, if the publisher has not released a version of the update program that is compatible with DEP, you can turn off DEP protection for the program. Once the protection is turned off, the program will continue to work, but it may be vulnerable to attack by other programs or files.

So, how to turn off DEP for programs that you trust, and open DEP protection for all unknown programs? We need to set it manually in the System Settings window.

Step 1: Go to the Control Panel and click to open “All Control Panel Items →System”. Click the “Advanced System Settings” item in the left column. If the current registrant is at a non-admin level, the system prompts for an administrator password or confirmation. Click the “Advanced" tab, under the "Performance" group, click the “Set" button (Figure 1).

Step 2: In the “Performance Options” dialog box, click on the “Data Execution Protection” tab and then click on “Select” for the following selected programs. Enable the DEP" radio box for all programs and services (Figure 2).

Step 3: Click the “Add” button to add your own trusted programs that do not require DEP protection (Figure 2). Look through the "Program Files" folder to find the executable file for the program (with .exe as the file extension), then click “Open” (Figure 3).

Step 4: Click “OK" in the "System Properties" dialog box, click “OK", and then click “OK”. Restart your computer for the changes to take effect.

Small Tips:

To turn off DEP for individual programs, check the box next to the program for which you want to turn off DEP, and then click “OK”. To turn on DEP for a program, clear the check box next to the program for which you want to open DEP, and then click “OK”.

The above is the win7 data execution protection function DEP to achieve memory monitoring unknown program running method introduction, the operation is very simple, everyone learned? I hope this article can help everyone!