---
id: 2072
title: "The Challenges of Deploying Security Mitigations"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2017/02/20/the-challenges-of-deploying-security-mitigations/"
published_at: "2017-02-20T14:15:41Z"
tags: ["secure-development", "cfi", "clang", "osquery", "cfguard", "security-mitigations"]
phying_url: "https://phying.com/item/2072"
lang: en
---

# The Challenges of Deploying Security Mitigations

## Summary

Applying CFI to osquery exposed deployment cost: CFGuard took two CMake lines, while ClangCFI resisted weeks of effort due to stricter semantics, all-or-nothing granularity, and clang bugs.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2017-02-20T14:15:41Z
- **Original:** https://blog.trailofbits.com/2017/02/20/the-challenges-of-deploying-security-mitigations/
- **Phying News:** https://phying.com/item/2072