An interesting presentation about Microsoft’s EMET as a tool for protection against PKI certificate substitution.

And, by the way, for those who do not know it, a link to EMET:

http://technet.microsoft.com/en-us/security/jj653751