Hit by a Bus: Physical Access Attacks with Firewire - 2008 - Ruxcon

More documents

Recommendations

Info

Firewire Addressing • Nodes on a firewire bus address each other like this node id memory addr 16bit 32bit • Yes, that is a memory address... • ... and yes, it's 32 bits long • and yes, it does map onto the bottom 4GB of physical memory Copyright Security-Assessment.com 2006
DMA: The Fire in your Wire read 0x041e,32 bytes,plz Firewire host Firewire node “hai2cmos”, kthx OHCI 1394 Controller 0x0400 0 DMA Controller Main Memory CPU 0xffffffff Copyright Security-Assessment.com 2006
Page 1 and 2: Hit by a Bus: Physical Access Attac
Page 3 and 4: Copyright Security-Assessment.com 2
Page 5 and 6: Introduction • Intro (
Page 7 and 8: Physical Access Attacks • ATMs: h
Page 9 and 10: Physical Access Attacks • Increas
Page 11 and 12: Firewire Background • Firewire (I
Page 13: The Fire in your Wire • Periphera
Page 17 and 18: This aint 0day • “Quinn The Esk
Page 19 and 20: Demo A vict^h^h^holunteer with a Wi
Page 21 and 22: CSR Trickery root@host~# romtool Us
Page 23 and 24: Memory Forensics • Traditional ha
Page 25 and 26: Down & Dirty with Physical RAM •
Page 27 and 28: Password recovery • Passwords and
Page 29 and 30: Mitigation • The OHCI spec doesn'
Page 31 and 32: Other Lunacy • From the 1394 Trad
Page 33: Questions ? http://www.security-ass

Hit by a Bus: Physical Access Attacks with Firewire - 2008 - Ruxcon

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?