低调的保护：当CMF、CSS遭遇IE7 0day ----飓风过岗 伏草惟存

秘书

学习下
到下个整合版的时候有用的

抓抓

基于软件的DEP貌似这个：








配合windows的貌似AMD的EVP增强病毒保护和Intel的EDB内存保护技术。。。

[ 本帖最后由 抓抓 于 2008-12-30 20:48 编辑 ]

Mr.Z

這個一直在用..但不知成效

huai168an

这个要CUP支持，部分CPU不支持就没辙了。。。

抓抓

原帖由 huai168an 于 2008-12-30 19:35 发表
这个要CUP支持，部分CPU不支持就没辙了。。。

如果CPU不支持，上面会有显示。。。

liweimin88

U版回归，出手不凡，进来欢迎一下，CMF已经用上了，谢谢。

兰德泽尔魔文字

郁闷啊   怎么用IE7访问那个doubleluck.com.cn时CMF没有提示啊

兰德泽尔魔文字

修复的还蛮快的

dl123100

看来comodo还是有一定技术实力的，不像某些大厂，号称不升级就能防这个溢出漏洞，结果shellcode改一下就挂了。
希望cmf早日集成到cis中！

Magis

cmf和JRE以及C++冲突，CSS对以上两者兼容性较好。
DEP和cmf(css)的比较官方有~
1. Software DEP is nothing but SEH chain validator (means it's not a DEP but some way to prevent one rare type of shellcode's injection)
2. Hardware DEP is very incompatible thing, that's why:
a) DEP mode by default is OptIn = all system services are protected, user apps aren't protected
b) DEP is _VERY_ incompatible thing so we 've got one more "layer" over DEP-mode - windows disables DEP for app which is know to be incompatible with DEP (this includes many checks, like exe-packers check and so on)
3. DEP-protection is vulnerable to ret2libc kind of attack (so you're not protected at all)

So we 've got CMG Smiley A fast and compatible way to be protected. It protects all apps against ret2libc and common BO attacks, and it doesn't treminate your favorite apps as well.

It's an evolution: first was CMG (Comodo Memory Guardian), than it was renamed at some stage to CMF (Comodo Memory Firewall).
...And CIS has SafeSurf (if you agreed to install it during installation process of CIS) which do (nearly) same job as CMF.

结论就是CMF>DEP

[ 本帖最后由 magiscoldeye 于 2008-12-30 22:45 编辑 ]