Holes in AppLocker and Software Restriction Policies (SRP)

AppLocker:
See pp. 48-55 of the pdf at http://sourceforge.net/projects/raisingcostsforattackers/files/?source=navbar. By "Reflective injection," what is meant is hxxp://leastprivilege.blogspot.com/2013/04/bypass-applocker-by-loading-dlls-from.html .

SRP:
Limitations of Software Restriction Policies

 

Whitelisting is a terrific, secure approach, one I've used for several years. It's a tough sell on many home users though, especially those who routinely install different programs. I realize the article is geared toward business environments. Hash rules are not at all convenient to maintain for executables and dll's that are updated frequently, such as Flash. I use some highly granular Path rules in the user %Appdata% directories for those type programs. It strikes a nice balance between decent security while maintaining convenience.