Reply to thread

Message: <blockquote data-quote="Andy Ful" data-source="post: 815250" data-attributes="member: 32260">There is also another problem with blocking DLLs by FIDES, or generally by denying read access. The DLLs can be run as the file with any extension. So, you can run the DLL library as malware.txt or malware.tmp, etc. (binary with changed extension). This is the common way used in the wild. FIDES cannot recognize it (Bouncer and SRP can). Furthermore, most security solutions will fail when malware will use reflective DLL loading. I think that FIDES can be useful  for blocking the .NET libraries used by the system, like system.management.automation.dll .In my opinion, one cannot rely much on blocking DLLs.</blockquote>

Top