HVCI, CET, Arbitrary Code Guard, Control Flow Guard. These words and acronyms, among others, strike a chord with most vulnerability researchers. Many of these mitigations have been seen in the community as the end of certain binary exploitation techniques. We know, however, that life has continued for vulnerability researchers - although there is now a significant cost associated with exploits.
Although these “large” exploit mitigations, which came with heavy investment from Microsoft, are notorious - this talk aims to address the “smaller” or “more niche” mitigations, examining why Microsoft would invest in them, and how, when all of these smaller mitigations are put together, they also impose a significant cost to exploitation.
SANS HackFest Summit 2023
Just Pocket Change? Examining the Cost of “Nickel and Dime” Exploit Mitigations
Connor McGarr, Software Engineer III, Endpoint Protection (EPP), CrowdStrike
View upcoming Summits: www.sans.org/u/DuS
Негізгі бет Just Pocket Change? Examining the Cost of “Nickel and Dime” Exploit Mitigations
No video
Пікірлер