Can you still trust your network card? - Agence nationale de la ...

More documents

Recommendations

Info

Network interface controller The NetXtreme architecture RX RISC An on-chip RISC processor is provided for running value-added firmware that can be used for custom frame processing. The on-chip RISC operates independently of all the architectural blocks; essentially, RISC is available for the auxiliary processing of data streams. ◮ a MIPS CPU on the card; ◮ it has access to major components: ◮ shared memory, ◮ incoming and outgoing packets, ◮ PCI Configuration Space, ◮ SMBus; ◮ it executes a firmware. SGDSN/ANSSI – http://www.ssi.gouv.fr/trustnetworkcard 8/51
Network interface controller The NetXtreme architecture The firmware in the NetXtreme Different firmwares: ◮ ASF (Alert Standard Format protocol); ◮ TSO (TCP Segmentation Offloading). The firmware is: ◮ loaded from an EEPROM; ◮ or by the driver from the filesystem: ◮ Linux driver only has TSO, ◮ Windows drivers rarely have a firmware, ◮ the firmware seems protected; ◮ loaded to memory (SRAM) during execution. SGDSN/ANSSI – http://www.ssi.gouv.fr/trustnetworkcard 9/51
Page 1 and 2: Can you still trust your network ca
Page 3 and 4: Impacts on security If an attacker
Page 5 and 6: What won’t be described today Thi
Page 7: Network interface controller The Ne
Page 11 and 12: Remote administration protocols ASF
Page 17 and 18: Remote administration protocols RMC
Page 19 and 20: Remote administration protocols RMC
Page 21 and 22: Remote administration protocols Sum
Page 23 and 24: Protocol analysis Protocol security
Page 25 and 26: Protocol analysis Implementation pr
Page 27 and 28: The vulnerability Instrumenting the
Page 37 and 38: The vulnerability Crash analysis Ch
Page 39 and 40: The vulnerability Crash analysis Ex
Page 41 and 42: The vulnerability Crash analysis St
Page 43 and 44: Real impact What can be done in the
Page 45 and 46: Real impact Controlling the host Us
Page 47 and 48: Real impact Controlling the host De
Page 49 and 50: Real impact Controlling the host Co
Page 51: Real impact Controlling the host Qu

Can you still trust your network card? - Agence nationale de la ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?