From KASLR Bypass Mitigations in Windows 8.1: From TSX improves timing attacks against KASLR: "An excellent paper" in the previous link links to the wrong document. I believe the correct link is Practical Timing Side Channel Attacks against Kernel Space ASLR.
It's good to see Microsoft improving its security posture with the mitigations. I believe KASLR on Windows will always be bypassable because it is a hybrid kernel in which most of the subsytem components run in the same address space as the kernel. http://en.m.wikipedia.org/wiki/Hybrid_kernel http://en.m.wikipedia.org/wiki/Kernel_(operating_system)
