Chaos Communication Congress

EMET 5.1 - Armor or Curtain? (#6161) (31x91)

Air date: Dec 29, 2014

Speaker: René Freingruber EMET (Enhanced Mitigation Experience Toolkit) is an application which can be used to further harden a Windows system by adding additional security protections to running processes. These protections include several ROP (Return-Oriented-Programming) checks, shellcode detection mechansims, heap-spray mitigations and many more. The talk covers techniques to bypass EMET 5.1 (the current version) and shows the audience how hard/easy it is for an attacker to accomplish this.