EMET 4 0 PKI Mitigation
Neil Sikka explores emet 4 0 pki mitigation at DEF CON 21, examining exploit-mitigation and practical defenses.
Summary
Architecture and Background
EMET 4.0 PKI Mitigation NEIL SIKKA SOFTWARE SECURITY ENGINEER, MICROSOFT Microsoft EMET is a free Mitigation tool. In addition to its memory corruption exploit mitigations, a newly introduced feature is the PKI mitigation.
Vulnerability Analysis
This mitigation implements x509 certificate pinning to prevent usage of forged certificates in HTTPS sessions in the web browser. This talk is technical as it demos EMET in action and explains how the PKI mitigation works.
Exploitation and Demonstrations
Neil Sikka (@neilsikka) is a computer security enthusiast and researcher. He works at Microsoft on MSRC (Microsoft Security Response Center) as a Software Security Engineer where he analyzes 0day exploits and other security vulnerabilities in any Microsoft software, and develops security tools such as EMET.
Remediation and Defensive Strategies
In addition to his security research at work, he also likes to do security research on his free time at home on nights and weekends. He has a technical blog where he posts his security research ( facebook.com/neilsikka Materials:
Related talks
Main Stage·23 min
Chuanda Ding
Chuanda Ding dissects the internal architecture of Windows 10 security mitigations and explains how advanced exploit techniques bypass Defender protections.
The Linux Foundation·24 min
Brian Trzupek
Investigates from Trust Assumptions To Trust Evidence: Why PKI and Confidential Computing and evaluates key implications for security practitioners.
The Linux Foundation·43 min
Zicheng Wang · Yueqi Chen
Examines hotBPF++: A More Powerful Memory Protection for the Linux Kernel and evaluates key implications for security practitioners.