RUS  ENG
Full version
JOURNALS // Proceedings of the Institute for System Programming of the RAS // Archive

Proceedings of ISP RAS, 2025 Volume 37, Issue 3, Pages 325–354 (Mi tisp1006)

Overview of hardening mechanisms in operating systems and user applications

D. V. Efremova, A. K. Petrenkobca, B. A. Pozincda, V. A. Semenovea

a Ivannikov Institute for System Programming of the RAS
b Lomonosov Moscow State University
c National Research University Higher School of Economics
d “EC-leasing” Co.
e Moscow Institute of Physics and Technology

Abstract: This paper presents a systematic review of hardening mechanisms for operating systems and user applications. Various types of protection mechanisms are discussed, including memory protection mechanisms, hardware stack protection, dynamic memory protection, address space randomization, control flow protection, and system integrity protection. The principles of these mechanisms, their effectiveness, and their impact on system performance are analyzed in detail. Special attention is given to the implementation of protective mechanisms in modern operating systems, particularly in the Linux kernel. This work is intended for information security specialists, operating system developers, and researchers working on information security issues.

Keywords: information security, operating systems, application security, memory protection, integrity control, isolation, security hardening, hardening.

DOI: 10.15514/ISPRAS-2025-37(3)-23



© Steklov Math. Inst. of RAS, 2025