Windows 10 Mitigation Improvements

on YouTube ↗51m

" summary

Data-driven exploit analysis finds over 85% of two years of Adobe in-the-wild exploits rely on read/write primitives via vector-length corruption, prompting Flash to use the Windows heap and heap subsegment randomization; a conservative memory garbage collection for the DOM kills most use-after-free classes. An internal offensive red team prototypes bypasses and validates mitigations like Control Flow Guard, 64-bit browsing by default and virtualization-based security with hypervisor-enforced code integrity. Result: zero-day exposure for IE drops from 135 to 45 days and Edge shows ~56% fewer RCE CVEs versus IE.

AI-written summary · about

" chapters (11)

1. 0:00Start
2. 2:03Problem: Augmenting Preventative Security
3. 7:23Strategy. Data-Driven Software Defense
4. 22:10REDTEAM: Windows and Devices
5. 31:48Edge attack surface reduction
6. 35:2164-bit browsing by default
7. 38:10Control Flow Guard Bypasses & Enhancements
8. 40:09Code integrity & image load restrictions
9. 41:24Dynamic code restrictions
10. 42:22Windows 10 Virtualization-Based Security (VBS)
11. 44:11Windows Kernel 64-bit ASLR Improvements

" related talks

• 01h 05mFinding and Fixing Security Bugs in FlashNatalie Silvanovich · USENIX Security '16
• 58mThe Code Behind The VulnerabilityBarry Dorrans · NDC Sydney 2017
• 58mExploiting Adobe Flash Player In The Era Of Control Flow GuardFrancisco Falcon · Black Hat Europe 2015
• 44mCutting Edge: Microsoft Browser Security — From People Who Owned ItWei Wei, Chuanda Ding, Zhipeng Huo · Black Hat Europe 2018
• 39mA landscape of unintended consequencesSarah Allen · Code Mesh LDN 2019
• 35mOn Securing Legacy Software Against Code-Reuse AttacksLucas Vincenzo Davi · RuhrSec 2016
• 41mThinking Outside the Sandbox - Violating Trust Boundaries in Uncommon WaysBrian Gorenc, Jasiel Spelman · Black Hat USA 2014
• 45mThe Code Behind The VulnerabilityBarry Dorrans · Øredev 2018