Execute Disable Bit is a hardware-based security feature that can reduce exposure to viruses and malicious-code attacks and prevent harmful software from executing and propagating on the server or network.



Intel® Memory Protection Extensions (Intel® MPX) provides a set of hardware features that can be used by software in conjunction with compiler changes to check that memory references intended at compile time do not become unsafe at runtime due to buffer overflow or underflow.



Intel® Software Guard Extensions (Intel® SGX) provide applications the ability to create hardware enforced trusted execution protection for their applications’ sensitive routines and data. Run-time execution is protected from observation or tampering by any other software (including privileged software) in a system.