Self-repairing software tackles malware
sciencedaily.com
sciencedaily.com
Depending on how A3 works, or something like it would work, I wonder at the level of increased complexity in not only building the "EMT" services in a way to notice something is wrong and to fix it, but building it in a way where those services compare the intent of the program against the actual program and identify ways to improve it.
That's because the attackers get to test their arbitrary code execution against your widely deployed countermeasure (e.g. AV with heuristics, EMET, whatever) until they win. You are the Maginot Line, and they are XYZ.
Funnily enough though, security through obscurity / unusual security measures do beat a lot of canned attacks.
Regehr does cool work on software validation though - it might do what it says. I hope he jumps into this thread and tells us what's actually up :)
So, it's not that the defenses can't possibly work. It's actually that they do, until they don't.
It would be interesting to look at. Links?