EMET 3.5 Tech Preview Offers ROP Exploit Mitigation; Released MSRC Progress Report

Microsoft Trustworthy Computing released the "Enhanced Mitigation Experience Toolkit" (EMET) 3.5 Technology Preview, which includes new Return Oriented Programming (ROP) defenses inspired by BlueHat Prize contest finalist Ivan Fratric. "ROP is an advanced technique that attackers use to combine short pieces of benign code, already present in a system, for a malicious purpose. ROPGuard defines […]

Microsoft Trustworthy Computing released the "Enhanced Mitigation Experience Toolkit" (EMET) 3.5 Technology Preview, which includes new Return Oriented Programming (ROP) defenses inspired by BlueHat Prize contest finalist Ivan Fratric.

"ROP is an advanced technique that attackers use to combine short pieces of benign code, already present in a system, for a malicious purpose. ROPGuard defines a set of checks that can be used to detect when certain functions are being called in the context of malicious ROP code and can help protect against attacks exploiting memory safety vulnerabilities," Microsoft explains.

EMET 3.5 Technology Preview builds on the recently released EMET 3.0 toolkit that included features for enterprise configuration, deployment and event logging that help allow for real-time notification of exploitation attempts.

EMET Technology Preview 3.5 is available for download from the Microsoft download Center.

This week, Microsoft also released its annual MSRC progress report, which covers from June 2011 through July 2012.

This report "highlights our collaboration with the security community and the industry at large through programs like Microsoft Active Protections Program (MAPP) and Microsoft Vulnerability Research (MSVR)," Microsoft stated.

Today, information shared through the MAPP community "helps protect more than 1 billion customers and significantly reduces the time it takes security vendors to create protections. Through the MSVR program this year, we reported 96 vulnerabilities to 39 different vendors," adds Microsoft.

You can read more about each of these programs (and more!) in the progress report (PDF).