Panel “Exploit Mitigations: Completeness and Effectiveness versus Performance”
https://nebelwelt.net/blog/20170707-mitigation-panel.html [nebelwelt.net]
2017-07-07 19:34
As part of ESSoS ‘17 we have organized a joint ESSoS/DIMVA panel on exploit mitigations, discussing the past, present, and future of mitigations. If we look at the statistics of reported memory corruptions we see an upward trend in number of reported vulnerabilities. Given the success of contests such as pwn2own one might conclude that mitigations have not been effective while in fact, exploitation has become much harder and costly through the development of mitigations.