Liar Game: The Secret of Mitigation Bypass Techniques
No ratings
Presented at BlueHatShanghai 2019 by
In the past five years, we have developed a dozen or so mitigation bypass techniques, and most of them win a Microsoft's bounty. So, are there any commonalities in the development of these techniques? Is it still possible to develop more mitigation bypass techniques in the same way? Can we avoid this from happening in the future? In this talk, we will review the development of these mitigation bypass techniques, explain the strategy and tactics used in the process, and summarize the methodology behind them. Based on that, some suggestions for development will be given to help making the system more secure.