Exploit protection for advanced mitigations

Exploit protection (EP) was introduced in Windows 10 to integrate the enhanced experience mitigation experience toolkit (EMET) functionality. Many of the mitigations were simply incorporated into the operating system or enabled by default, as Windows 10 came with higher standards for application security and with its own mitigations against return-oriented programming (ROP). Exploit Protection’s key value comes from providing a way to mitigate against known vulnerabilities in older (pre-Windows 10) software or to make exceptions for them.

EP, as with traditional HIPS, requires knowledge of the operating system and the vulnerable software to ensure you get it right: consequently, this complexity increases the risk of impacting performance or functionality.

The best way of understanding the application of this technology is by viewing it as mitigation against specific vulnerabilities when a piece of software was not written using...