Security Research & Defense

Browse by Tags

All Tags » DEP (RSS)

Tuesday, September 08, 2009 9:57 AM

Assessing the risk of the September Critical security bulletins

This morning we released five security bulletins , all of them having a bulletin maximum severity rating of Critical and two having a bulletin maximum exploitability index rating of "1" (Consistent exploit code likely). We wanted to just say a few words

Posted by swiblog | (Comments Off)

Filed under: Mitigations, rating, Attack Vector, Exploitability, Risk Asessment, Defense-in-depth, DEP

Tuesday, August 04, 2009 12:33 PM

Preventing the exploitation of user mode heap corruption vulnerabilities

Over the past few months we have discussed a few different defense in depth mitigations (like GS [ pt 1 , pt2 ], SEHOP , and DEP [ pt 1 , pt 2 ]) which are designed to make it harder for attackers to successfully exploit memory safety vulnerabilities

Posted by swiblog | (Comments Off)

Filed under: Mitigations, exploitation, Exploitability, Security Science, Defense-in-depth, DEP

Friday, June 12, 2009 10:48 AM

Understanding DEP as a mitigation technology part 2

In our previous blog post , we explained how DEP works and how to determine if / how a process opted-in to DEP. Now we will demonstrate how DEP can be used to mitigate the risk of a real-world attack. We published a security advisory in February describing

Posted by swiblog | (Comments Off)

Filed under: Mitigations, Defense-in-depth, DEP

Friday, June 12, 2009 10:30 AM

Understanding DEP as a mitigation technology part 1

We have mentioned DEP in several recent blog posts ( 1 , 2 , 3 , and 4 ). This blog post will answer: What is DEP? How can you enable DEP? What are the risks in enabling different modes of DEP? This is the first of a two-part blog series on DEP as a mitigation

Posted by swiblog | (Comments Off)

Filed under: Mitigations, Defense-in-depth, DEP

Attachment(s): AddProcessParametersFlags - XPSP2.txt

Tuesday, June 09, 2009 9:59 AM

MS09-019 (CVE-2009-1532): The "pwn2own" vulnerability

IE8 behavior notes MS09-019 contains the fix for the IE8 vulnerability responsibly disclosed by Nils at the CanSecWest pwn2own competition (CVE-2009-1532). Nils exploited this vulnerability on an IE8 build that did allow .NET assemblies to load in the

Posted by swiblog | (Comments Off)

Filed under: Internet Explorer (IE), security zones, Exploitability, CanSecWest, Risk Asessment, Attack Surface Reduction, DEP