Containing or corralling the attacker to thwart his efforts takes the IR and recovery concept to the next level. Microsoft’s sandboxing, Microsoft’s Data Execution Prevention, Address Space Layout Randomization (ASLR) and AppBlocker are some of the technologies that fall under this category today. The full-blown tools for building a containment strategy are really not there yet, experts say. “Security is about the layered approach. That means several technical layers and user education,” says Roel Schouwenberg.”]
Source: https://www.darkreading.com/attacks-breaches/damage-mitigation-as-the-new-defense