Patch management is often looked down upon due to its simplicity and relatively short shelf life. However, if we identify patch management as a way to categorize all known and unknown code in our infrastructure (given clouds can be more uniform in deployments), we can accomplish a great number of goals at the same time.
Memory white listing has become more common in a variety of scenarios like game consoles, some cloud and current Windows versions. We’ll release some memory analysis tools based on memory integrity checking that work for 64 bit versions of Windows (all versions), Linux and *BSD. This will be sort of a “tripwire” for volatile memory designed to ensure no hidden, targeted, APT or zero-day threat ransom-ware is on your box.