ALSR – Phocean.net / Computer Security Blog Fri, 24 Feb 2017 21:17:51 +0000 en-US hourly 1 https://wordpress.org/?v=4.9.10 EMET, pretty weak ALSR /2011/08/16/emet-pretty-weak-alsr.html Tue, 16 Aug 2011 17:20:36 +0000 http://www.phocean.net/?p=1150 http://www.phocean.net/?p=1150 Didier Stevens “benchmarked” the efficiency of ALSR as implemented by the EMET tool.

The conclusion is that it is pretty weak, whereas I thought it was on pair with true ALSR (as advertised). Very instructive.

]]> EMET: configure memory protection on Windows /2010/09/25/emet-configure-memory-protection-on-windows.html Sat, 25 Sep 2010 15:56:00 +0000 http://www.phocean.net/?p=911 http://www.phocean.net/?p=911 Continue Reading]]> Microsoft published a nice tool named EMET (Enhanced Mitigation Experience Toolkit) whose purpose is to check and enforce the memory security policies such as ALSR and DEP.

It shows and allows to configure the global settings, but also, and this is the most interesting part, indicated for each process running if it supports those security measures. It is even able to enforce the protections for each application which would not support it natively (i.e. not set at compilation time).

]]>