2

I've just heard about and started playing with EMET and I am curious, do any AV or security suite applications do what EMET does or is EMET something entirely different?

3

Some AntiVirus suites are meant to provide similar features to the ones implemented in EMET as a proactive security feature. These include global API hooking to raise the bar of creating ROP payloads and DLL injection to implement process-level buffer-overflow detection.

However right now I can only refer to two papers describing how these protections of a specific product fail:

https://lock.cmpxchg8b.com/sophail.pdf

https://lock.cmpxchg8b.com/sophailv2.pdf

Generally speaking AVs still mainly focus on reactive protection so i would recommend to use EMET together with the traditional security tools.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.