Intel 2955U CL8064701523900 Data Sheet

The processor includes enhanced power-performance technology that routes

interrupts to threads or cores based on their sleep states. As an example, for energy

savings, it routes the interrupt to the active cores without waking the deep idle cores.

For performance, it routes the interrupt to the idle (C1) cores without interrupting the

already heavily loaded cores. This enhancement is mostly beneficial for high-interrupt

scenarios like Gigabit LAN, WLAN peripherals, and so on.

The Execute Disable Bit allows memory to be marked as executable when combined

with a supporting operating system. If code attempts to run in non-executable

memory, the processor raises an error to the operating system. This feature can

prevent some classes of viruses or worms that exploit buffer overrun vulnerabilities

and can thus help improve the overall security of the system. See the Intel

IA-32 Architectures Software Developer's Manuals for more detailed information.

Intel

®

 Boot Guard can help protect the platform boot integrity by preventing execution

of unauthorized boot blocks. With Intel

®

 Boot Guard, platform manufacturers can

create boot policies such that invocation of an unauthorized (or untrusted) boot block

will trigger the platform protection per the manufacturer's defined policy.

With verification based in the hardware, Intel

®

 Boot Guard extends the trust boundary

of the platform boot process down to the hardware level.

Intel

®

 Boot Guard accomplishes this by:

•

Providing hardware-based Static Root of Trust for Measurement (S-RTM) and the

Root of Trust for Verification (RTV) using Intel architectural components.

•

Providing architectural definition for platform manufacturer Boot Policy.

•

Enforcing manufacture provided Boot Policy using Intel architectural components.

Benefits of this protection is that Intel

®

 Boot Guard can help maintain platform

integrity by preventing re-purposing of the manufacturer’s hardware to run an

unauthorized software stack.

Intel

®

 Boot Guard technology availability may vary between the different SKUs.

Supervisor Mode Execution Protection provides the next level of system protection by

blocking malicious software attacks from user mode code when the system is running

in the highest privilege level. This technology helps to protect from virus attacks and

unwanted code from harming the system. For more information, refer to Intel

and IA-32 Architectures Software Developer's Manual, Volume 3A at: 

Mobile 4th Generation Intel

®

 Core

™

 Processor Family, Mobile Intel

®

 Pentium

®

 Processor Family, and Mobile Intel

®

 Celeron

®

Processor Family

Datasheet – Volume 1 of 2

July 2014

40

Order No.: 329001-007