Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This document lists the Mitigation Options and their purpose in the Settings screen when you create a New Enhanced Mitigation Action.

 

Data Execute Prevention (DEP) - Prevents an attacker attackers from using application code outside of the areas of memory asked as 'executable'memory that are not explicitly marked as executable. DEP is a critical part of the broader set of exploit mitigation technologies developed by Microsoft such as ASLRSeHOPSafeSEH, and /GS. These mitigation technologies complement one another; for example, DEP’s weaknesses tend to be offset by ASLR and vice versa. DEP and ASLR used together are very difficult to bypass.

Structured Exception Handler Overwrite Protection (SEHOP) - Prevents an attacker from being able to make use of the Structured Exception Handler (SEH) overwrite exploitation technique.

...