What is Memory Protection?

Understanding Memory Protection

Memory protection is a set of hardware and operating-system controls that govern how processes can read, write, and execute regions of system memory. It isolates each process's address space and enforces access rights so that unauthorized programs cannot read, modify, or execute memory they should not touch, preserving system stability and security.

The mechanism combines several layers. The CPU's memory management unit (MMU) uses virtual memory and paging to give each process its own address space, with page-level permissions (read, write, execute). Hardware features like the NX/XD (no-execute) bit mark data pages non-executable, defeating code injection into the stack or heap. Operating systems add Address Space Layout Randomization (ASLR) to randomize memory locations, stack canaries to detect overflows, and Data Execution Prevention (DEP) to enforce non-executable regions.

Memory protection matters because memory-corruption vulnerabilities are among the most exploited classes of bugs. Buffer overflows, use-after-free, and similar flaws let attackers overwrite control data and hijack execution. Without these protections, a single overflow could let injected shellcode run with the victim process's privileges. Memory protection raises the cost and complexity of exploitation dramatically, often turning a reliable code-execution exploit into a mere crash.

For example, an attacker sends an oversized input that overflows a vulnerable program's stack buffer, attempting to overwrite the return address and jump into shellcode placed on the stack. With NX/DEP enabled, the stack is marked non-executable, so the CPU refuses to run the injected code and faults. Combined with ASLR randomizing addresses, the attacker cannot reliably predict where to redirect execution, and the exploit fails.