Memory We know about user mode and kernel mode, and how programs in user-mode can only use the memory from 0x00000000 to 0x7FFFFFFF, while the system uses the memory from 0x80000000 to 0xFFFFFFFF. Let's talk about physical memory for a bit. Each computer must have a memory chip in ...

Introduction Before trying to debug the kernel, we must first understand a few things. We must know what the Rings in computer security are. Let's take a look at the picture taken from [1]: On the picture above, we can see four protection rings, which are mechanisms to protect ...

It's often the case that we need to debug a kernel application, like device driverS, system calls, interrupt routines, or some other kernel application. In this article we'll talk about SoftICE kernel debugger. Installing and Configuring the SoftICE Debugger We need to download the SoftICE, presumably the trial ...