Microsoft's EMET Security Technology Isn't Impenetrable
Researchers from security firm Bromium today revealed that they have discovered ways to bypass Microsoft's Enhanced Mitigation Experience Toolkit (EMET).
EMET is designed to provide an additional layer of security to applications to reduce the risk of exploitation. While EMET prevents many attacker bullets from getting through to an application, Bromium now asserts that EMET is not bulletproof.
Bromium has been in touch with Microsoft for a few months on the EMET research, and Microsoft peer-reviewed Bromium's research, Rahul Kashyap, chief security architect and head of research at Bromium, told eWEEK. Bromium's research shows that it is possible to bypass all the protections in EMET, Kashyap said. "By 100 percent bypass, we mean all the protections of EMET were enabled, and we bypassed them," he said.
