DEF CON 21 - Amr Thabet - EDS Exploitation Detection System

2,714 views · Published 21 December 2013 · 45:16 · Indexed 14 November 2026

Channel: DEFCONConference · 2013 · Science & Technology

Watch on YouTube

(Transcription coming soon, sorry for the delay ) 
EDS: Exploitation Detection System 
AMR THABET MALWARE RESEARCHER, Q-CERT

In the last several years, exploits have become the strongest weapons in cyber warfare. Exploit developers and vulnerability researchers have now become the nuclear scientists of the digital world. OS Companies and third party companies have created several security mitigation tools to make it harder to use these vulnerabilities and have made exploit creation harder.

In this presentation, I will talk about a new security mitigation tool which is based on the co-operation of several mitigations to cover their weaknesses. It's based on monitoring the memory changes without decreasing the performance of the running application and creates a multi-layer protection with regular mitigations.

Amr Thabet (@Amr_Thabet) a Malware Researcher at Q-CERT with 5+ years experience in reversing malware and researching. I'm the Author of many open-source tools like Pokas Emulator and Security Research and Development Framework (SRDF). 
Facebook: http://fb.com/AmrHassanThabet

Materials: 
https://www.defcon.org/images/defcon-21/dc-21-presentations/Thabet/DEFCON-21-Thabet-EDS-Exploitation-Detection-System-Updated.pdf 
https://www.defcon.org/images/defcon-21/dc-21-presentations/Thabet/DEFCON-21-Thabet-EDS-Exploitation-Detection-System-WP-Updated.pdf

More from this channel