Community-Based Defense: Looking Outward, Moving Forward (Microsoft)

ronjor · Jul 28, 2010

MSRCTEAM
28 Jul 2010 8:15 AM

Two years ago, in front of a standing-room only crowd here at Black Hat, we introduced three new information sharing programs as well as the concept of Community-Based Defense. The underlying concept shared by all three programs was simple-collaboration will be key to preventing and defending against online crime going forward; no one company, individual or technology can do it alone. The call to action was bold-put aside competitive and philosophical differences and move beyond our individual boundaries to work together to help improve and protect the broader security ecosystem. The reaction-applause!

Even with more concerted attention on community-based defense and this growing sense of shared responsibility throughout the security community, attackers will still continue to case systems and applications looking for vulnerabilities. The stakes are high and criminals won't relent. So today, we're also announcing the Enhanced Mitigation Experience Toolkit (EMET).
EMET is a free tool that provides a way for IT professionals to add some of the latest security mitigations -- such as DEP, mandatory ASLR and export address table (EAT) filtering -- to software to protect against exploits of vulnerabilities. It helps harden existing applications from current exploit techniques without requiring any recoding. Look for an SRD blog post in August announcing availability of the new toolkit on the Microsoft Download Center
Click to expand...

Microsoft

Kees1958 · Jul 28, 2010

Works nice see https://www.wilderssecurity.com/showthread.php?t=277967

Any tried (beside me)

When used in combo with https://www.wilderssecurity.com/showthread.php?t=278011 you have a deny execute containment on the data stored (download directory for Browser and Mail directory/pst files for e-mail), this should raise the bar for your most vulnarable processes.

CloneRanger · Jul 28, 2010

@ronjor & Kees1958

Seems like a nice idea and less than 200k Good for MS

Some of the individual mitigations have additional requirements. If the requirements are not met, those mitigations will not work (the other mitigations will continue to work). The mitigation requirements are as follows:

• DEP
Minimum supported client: Windows Vista with SP1, Windows XP with SP3
Minimum supported server: Windows Server 2008

http://www.microsoft.com/downloads/...FamilyID=4a2346ac-b772-4d40-a750-9046542f343d
Click to expand...

Can't try it as i'm staying with XP/SP2

ALookingInView · Jul 29, 2010

Eagerly awaiting this.

Log in or Sign up

Community-Based Defense: Looking Outward, Moving Forward (Microsoft)

ronjor Global Moderator

Kees1958 Registered Member

CloneRanger Registered Member

ALookingInView Registered Member

Log in or Sign up

Community-Based Defense: Looking Outward, Moving Forward (Microsoft)

ronjor Global Moderator

Kees1958 Registered Member

CloneRanger Registered Member

ALookingInView Registered Member

Useful Searches