slides - PDOS - MIT

More documents

Recommendations

Info

Security of embedded interpreters• Untrusted bytecode• Must validate the bytecode before execution• Untrusted input• Must execute the bytecode defensively• No strict isolation• Must prevent bugs in embedded interpreters fromaffecting the host system
Security of embedded interpreters• Untrusted bytecode• Must validate the bytecode before execution• Untrusted input• Must execute the bytecode defensively• No strict isolation• Must prevent bugs in embedded interpreters fromaffecting the host system• Embedded interpreters that fail to do so(correctly) will be vulnerable
Page 1 and 2: Security Bugs inEmbedded Interprete
Page 3 and 4: Embedded interpretersHost systemByt
Page 5 and 6: Embedded interpretersHost systemByt
Page 7 and 8: Prevalence of embedded interpreters
Page 15 and 16: Our contributions• Studies of 10
Page 17 and 18: A packet filtering example• Monit
Page 19 and 20: A packet filtering example• Monit
Page 21 and 22: A packet filtering example• Straw
Page 23 and 24: A packet filtering example• Straw
Page 25 and 26: Solution: Berkeley Packet Filter (B
Page 39 and 40: Security of embedded interpreters
Page 41: Security of embedded interpreters
Page 45 and 46: INET DIAG infinite loop vulnerabili
Page 51: INET DIAG infinite loop vulnerabili
Page 56 and 57: ClamAV signed division vulnerabilit
Page 64 and 65: FreeType arbitrary code executionJa
Page 66 and 67: FreeType arbitrary code executionpu
Page 74 and 75: Security guidelines
Page 76 and 77: Security guidelines• A better sol
Page 78 and 79: Pitfall 1: complex feature sets•
Page 80 and 81: Pitfall 1: complex feature sets•
Page 82 and 83: Pitfall 2: resource consumption•
Page 84 and 85: Pitfall 3: calls to the host system
Page 86 and 87: Research Opportunities
Page 88 and 89: Research Opportunities• Testing e
Page 90 and 91: Research Opportunities• Testing e
Page 92 and 93:
References• BPF: S. McCanne and V
Page 94:
Q & ASecurity Bugs inEmbedded Inter
show all

slides - PDOS - MIT

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?