Focus

Traps Endpoint Security Manager Administrator's Guide

Linux Exploit Protection Modules

Table of Contents

Traps for Linux provides advanced exploit protection from brute force attacks, kernel privilege escalation and other common techniques.

To combat attackers from leveraging software vulnerabilities on Linux endpoints, Traps employs the following exploit protection modules (EPMs):

Name	Type	Description
Brute Force Protection	Application Protection	Prevents attackers from hijacking the process control flow by monitoring memory layout enumeration attempts.
Kernel Privilege Escalation Protection	Kernel Protection	Prevents an attacker from using the privilege information of another process with greater privileges to run a process with system permissions.
ROP Mitigation	Application Protection	Protects against the use of return oriented programming (ROP) by protecting APIs used in ROP chains.
Shellcode Protection	Application Protection	Reserves and protects certain areas of memory commonly used to house payloads using heap spray techniques.