EMET 4.0 PKI Mitigation

Presented at DEF CON 21 (2013), Aug. 4, 2013, noon (45 minutes)

Microsoft EMET is a free Mitigation tool. In addition to its memory corruption exploit mitigations, a newly introduced feature is the PKI mitigation. This mitigation implements x509 certificate pinning to prevent usage of forged certificates in HTTPS sessions in the web browser. This talk is technical as it demos EMET in action and explains how the PKI mitigation works.

Presenters:

• Neil Sikka

Links:

• https://defcon.org/html/defcon-21/dc-21-speakers.html#Sikka
• https://infocon.org/cons/DEF CON/DEF CON 21/DEF CON 21 video and slides/DEF CON 21 - Neil Sikka - EMET 4.0 PKI Mitigation - Video and Slides.mp4 (Video and Slides)
• https://www.youtube.com/watch?v=ENL9FF0JMA8

Similar Presentations:

• BSidesSF 2014 / Bypassing EMET 4.1
• 31C3 (2014) / EMET 5.1 - Armor or Curtain?
• Black Hat USA 2016 / Using EMET to Disable EMET