Microsoft beefs up anti-exploit tool with tech from $250K contest finalist

25.07.2012

One of the most notable security backports was of a Windows 7 feature that blocked the automatic execution of files on a USB drive.

In 2009, Microsoft offered the feature -- which disabled AutoRun -- to Windows XP and Vista users; in early 2011, the AutoRun update was of those editions.

AutoRun has been abused by some of the highest-profile worms in the last decade, including Conficker and Stuxnet, the latter a worm reportedly created with U.S. and Israeli government backing and designed to sabotage Iran's nuclear program.

Microsoft credited the AutoRun backport to XP and Vista with in the first six months of 2011.

"I think they will add it to Windows," said Storms of ROP technologies Microsoft received during the contest. "We will see features start to emerge in the next service pack ... it seems like a natural progression. Test it in EMET, then implement in a major update."