DEP (Data Execution Prevention)

PreviousNext

Information about Microsoft's DEP.

(c) 2007-2008 Hermetech International Ltd.

DEP (Data Execution Prevention) is a security feature implemented in the Windows Operating Systems starting with Windows XP (Service Pack 2) and Windows Server 2003 to inhibit the use of dynamic memory buffers for running code. Designed primarily to prevent malicious software from running on computers it can also affect software programs that access the internet or make network API calls to open TCP/IP connections or gather TCP/IP information on a computer/server.

 

Since this feature is so new, most casual windows users (and many network administrators) are unaware that it even exists. If DEP is affecting any EasyHL7 software the symptoms will be pretty dramatic. The applications or services might just shut down unexpectedly with no warning or error message.  You might get NO WARNING from windows at all the application just closes. For the TCP/IP Services (HL7 Listeners and Routers) it might be the same, the service may not start, or may start and immediately stop again with nothing in the log files to indicate why.

 

Even GETTING to the DEP settings on a computer is counter-intuitive. The easiest way we've found is to 'RIGHT CLICK' on 'My Computer' in MS Windows Explorer and then click 'Properties' in the right click menu. In the System Properties dialog box click the 'Advanced' tab. In the 'Advanced' tab click the 'Settings' button in the 'Performance' section (see below). This will open the 'Performance Options' Dialog box

 

system properties dialog box

 

performance options dialog box

 

If the radio button with the text 'Turn on DEP for essential Windows programs and services only' is checked then DEP may not be the cause of the problem.

If however, the radio button with the text 'Turn on DEP for all programs and services except those I select' is checked then you may need to add the EasyHL7 product to the exceptions list.

 

 

You might wonder why DEP would affect EasyHL7 programs but don't affect other programs that do much more invasive, potentially dangerous things on a computer (Like PCAnywhere or Terminal Services).  The answer is brutally simple economics. Large corporations, MicroSoft or Symantec, or Oracle etc and their products are 'pre-approved' by the operating system due to their market position or relationship to Microsoft, while our modest New Zealand company is not even on their radar (yet).

 

All of the EasyHL7 programs are digitally signed by HermeTech International Ltd with a certificate from an internationally recognized certifying authority (Thawte), and all of our internet transactions are secure (HTTPS) using HermeTech's digital certificate from Verisign.