Is a kernel protection mechanism that prevents most user-space programs from interacting or reverse-engineering hardware details they don't have the privilege to use.