Critical.
Authoritative.
Strategic.
Subscribe to CIO Magazine »

Microsoft upgrades free app security tool

Enhanced Mitigation Experience Mitigation Experience Toolkit 2.0 helps Internet apps ward off targeted attacks

Microsoft released this week an upgrade to a tool that helps secure applications for the Internet without having to recode them.

The company's EMET (Enhanced Mitigation Experience Toolkit) 2.0 is a free tool designed to prevent current exploitation techniques used throughout the Internet, the company said. EMET 2.0 is accessible at this Web page. The tool helps to block targeted attacks against unpatched vulnerabilities in Microsoft, third party, or line of business applications, Microsoft said.

[ Microsoft this week also is hailing its Silverlight rich Internet technology. | Keep up with app dev issues and trends with InfoWorld's Fatal Exception blog and Developer World newsletter. ]

"While EMET can be used by anybody, it is primarily targeted at protecting applications on machines that are at high risk for attack. Good examples include line of business applications on back-end servers and browsers on the desktops of corporate executives. These are scenarios where an application compromise could be particularly damaging," said Andrew Roths and Fermin J. Serna of Microsoft Security Research Center (MSRC) Engineering, in a blog post.

Featured in version 2.0 is a new user interface that shows running processes and whether EMET is active for them. Also, the tool adds the following mitigations to applications that do not support them natively:

  • Mandatory address space layout randomization
  • An export address table capability in which hardware breakpoints are used to filter access to the EAT of kernel32.dll and ntdll.dll
  • Structured Error Handling Overwrite Protection, preventing Structured Exception Handling overwrite exploitation
  • Dynamic Data Execution Prevention, which marks portions of a process's memory non-executable, to make it difficult to exploit memory corruption vulnerabilities
  • NULL page allocation, to block attackers from taking advantages of NULL references in user mode
  • Heap Spray Allocation, to pre-allocate memory addresses to block common attacks that fill a process's heap with specially crafted content

EMET 2.0 allows customers to opt-in applications via a command line or through a GUI utility. Mitigations can be applied on a per-application and per-process basis. The tool can be updated as new mitigation technologies become available.

Thirty-two and 64-bit applications are supported.

This article, "Microsoft upgrades free app security tool," was originally published at InfoWorld.com. Follow the latest developments in business technology news and get a digest of the key stories each day in the InfoWorld Daily newsletter.

Read more about developer world in InfoWorld's Developer World Channel.

Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.

More about: Andrew, Microsoft, Toolkit
References show all

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the CIO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: application development, Developer World, Microsoft, security, Security Central, software
Latest Blog Posts
Whitepapers
  • Seven Steps to Effective Data Governance
    Creating a framework to ensure the confidentiality, quality, and integrity of data – the core meaning of data governance – is essential to meet both internal and external requirements, such as financial reporting, regulatory compliance, and privacy policies. At its best, data governance roots out risk – both business and compliance risk – by increasing oversight. This white paper provides seven steps for taking such an approach, concluding with a real world example, taking an incremental approach using a repeatable framework that is a practical, proven strategy that any size organization can implement to suit their immediate and long-term needs and budget.
    Learn more »
  • Email Encryption/Decryption and Signing integrated into a comprehensive content security solution
    Clearswift’s SECURE Email Gateway provides an easy to use approach to providing secure email conversations. The technology enables customers to provide the privacy, authenticity and integrity of the communication that secure messaging offers, but without the complexity and high administration cost of other systems. The Clearswift SECURE Email Gateway with integrated encryption technology enables business to communicate with confidence and protects them from the risk of sensitive data loss.
    Learn more »
  • Unified Communications Strategy Guide
    Articles include: How to ensure a successful UC project; Five reasons to set up unified communications; Unified communications: Is your network ready?; How to get the most from unified communications. Read this Computerworld Strategy Guide.
    Learn more »
All whitepapers
rhs_login_lockGet exclusive access to Invitation only events CIO, reports & analysis.
Recent comments