Compartilhar via

How do Windows NT System Calls REALLY work?

  • Artigo

Found a terrific article published by John Gulbrandsen called "How do Windows NT System Calls REALLY work?". John is the founder and president of Summit Soft Consulting.

He walks you through a few Windows Internals basics, Intel architecture basics and Interrupt Gates to help explain how a user mode process can reliably (and securely) make calls to kernel mode. A lot of it is explaining the CPU's role in switching between Ring 0 and Ring 3.

- Andy

Comments