4 ms·
this is control flow integrity, it's in windows 10 now as a technology called "control flow guard".
by munin 11y ago
this is control flow integrity, it's in windows 10 now as a technology called "control flow guard".
- nickpsecurity 11y agoI havent read it yet: was talking on topic in general. Cool they have CFI in Windows now, though. Most exciting thing Ive seen in that sub-field was Code Pointer Integrity. Really want the people who broke other CFI's to have a go at it. That and Softbound/Hardbound for more thorough cases.
- NickHaflinger 11y ago"Bypass control flow guard" :) https://www.blackhat.com/docs/us-15/materials/us-15-Zhang-Bypass-Control-Flow-Guard-Comprehensively-wp.pdf https://www.blackhat.com/docs/us-15/materials/us-15-Zhang-By...
- nickpsecurity 11y agoDoesn't surprise me. There's been few breaks in prior SFI/CFI's. That's why I'm not relying on CPI until strong peer review happens. There's added risk since CFI concept is really a cheat to try to avoid full data or memory safety. They think they'll get security and great performance with the cheat. They usually get the performance. ;)