2021

Exploit Prevention Techniques
Norton uses proactive exploit prevention techniques to protect your computer from the latest
zero-day attacks. You can turn individual techniques on or off from the Settings window. By
default, all techniques are turned on.
Note: Norton recommends that you keep all individual Exploit Prevention techniques turned
on to protect against the widest range of exploits.
Exploit Prevention techniques include:
■ Java Process Protection
Prevents remote cybercriminals from using malicious code through java processes and
allows only trusted java processes to run.
■ Structured Exception Handler Overwrite Protection
Protects against structured exception handling exploits, which compromise an application
by overwriting the pointer of an exception handler with an attacker controlled address.
■ Stack Pivot Detection
Block exploit attacks that changes the stack pointer with attacker’s controlled memory to
execute its Return Oriented Programming (ROP) crafted attack code.
■ Data Execution Prevention Enforcement
Blocks attackers from executing malicious code from stack or heap memory of your
computer.
■ Memory Layout Randomization Enforcement
Enforces dynamically loaded application DLLs or modules to be always loaded in random
locations to protect them from attackers.
■ Heap Spray Protection
Protects commonly targeted memory locations where exploits or attackers allocate their
shellcode using heap spray attack techniques.
■ Memory Layout Randomization Enhancement
Improves the ASLR (Address Space Layout Randomization) behavior of the operating
system when allocating critical memory locations of the application. This makes those
memory locations less predictable from attackers.
■ Null Page Protection
Pre-allocates the null memory location which will help in preventing attacks on null pointer
dereference vulnerabilities.
■ Remote DLL Injection Detection
Prevents remote cybercriminals from inserting malicious executable code over external
networks such as public IP addresses or domains.
56Keep secure on the Internet
Set Norton to protect you from exploits, cybercriminals, and zero-day attacks