EMET’s new Bottom Up Randomization spectacularly increased the entropy of DLL’s base addresses loaded into my test program. Instead of 15 different addresses, I had more than 200.Matt Miller told me how he implemented Bottom Up Randomization: “It works by reserving a random number (between [0,256]) of 64K regions via VirtualAlloc. This has the effect […]
Latest Comments