Skip to content
The Challenges of Deploying Security Mitigations
blog.trailofbits.com | blog | #secure-development | #cfi | #clang | #osquery | #cfguard | #security-mitigations
Summary
Applying CFI to osquery exposed deployment cost: CFGuard took two CMake lines, while ClangCFI resisted weeks of effort due to stricter semantics, all-or-nothing granularity, and clang bugs.
- Published
- Collected