18.2% complete

Question
A cybersecurity analyst implements security measures for a financial institution's infrastructure. The analyst explores different technologies to enhance security and must select the appropriate technology to strengthen security within the organization's infrastructure. What includes a CPU extension that protects data that is stored in system memory so that untrusted processes cannot read it?

1 answer

The technology you are referring to is Memory Encryption or more specifically, Intel's Software Guard Extensions (SGX) or AMD's Secure Encrypted Virtualization (SEV). These technologies include CPU extensions that provide a secure enclave or memory region where sensitive data can be processed.

These extensions are designed to protect data in system memory by ensuring that even if an untrusted process tries to access the memory, it cannot read or modify the encrypted data. This is particularly useful in environments where sensitive financial data is handled, as it helps mitigate potential attacks from malicious software or unauthorized access.

In summary, look for technologies such as Intel SGX or AMD SEV to meet the requirement of protecting data stored in memory from untrusted processes.