Home Formation « Windows 10 n’est pas aussi sûr que vous croyez » 

« Windows 10 n’est pas aussi sûr que vous croyez » 

0
563
Microsoft ne doit pas tuer EMET selon l'US-CERT

Will Dormann, un analyste en vulnérabilité du centre de coordination de la US-CERT, la Computer Emergency Response Team américaine, conseille à Microsoft de ne pas abandonner la boite à outils de sécurité EMET. Ces outils avaient été annoncés en fin de vie par le géant de Redmond, qui devait les inclure dans Windows10 mais, il semble que ce ne soit pas vraiment le cas. Contrairement aux dires de Microsoft, il semble que seule une toute petite partie des mesures de protection d’EMET ait été implémentée dans le nouvel OS.

Un bon article de Bleeping Computer avec les liens utiles ci-dessous.

CERT to Microsoft: Don’t Kill EMET, Windows 10 Is Not as Secure as You Think

Will Dormann, a Vulnerability Analyst for the US-CERT Coordination Center (CERT/CC), is advising Microsoft to continue developing EMET because Windows 10 does not provide the same protection measures, in spite of the company’s claims.

EMET, which stands for Enhanced Mitigation Experience Toolkit, was launched in 2009 as a standalone application that users could install separately from Windows and bolster the defenses of their operating systems. Earlier this month, Microsoft announced that it moved the EMET End-of-Life date from January 27, 2017, to July 31, 2018.

In its announcement, the company alluded that Windows 10 is as secure as EMET, just because many of EMET’s features had been embedded in the operating system’s core.

Microsoft didn’t embed all of EMET’s features in Windows 10

Dormann disagrees with Microsoft’s statements. The security expert says that Microsoft did not integrate all of EMET’s protection features.

He goes on into detail and splits EMET’s protection features into two categories, System-Wide Protection and Application-Specific Protection, and explains that Microsoft only embedded a few of these in Windows 10, mostly at the OS core level.

The problem is that despite feature some of the EMET OS-level protection features, EMET is a fantastic security tool because of its multiple application-level defenses…

Source : CERT to Microsoft: Don’t Kill EMET, Windows 10 Is Not as Secure as You Think