slides - PDOS - MIT

More documents

Recommendations

Info

FreeType arbitrary code executionpush"0xfea50000"""";"nargs"="P347push"0x2a"""""""""";"subroutine"num"="42callothersubr"""""";"call"custom"function..."...MaliciousPDF file withembedded T1 fontstruct"T1_DecoderRec"{""""""""""""""//"T1"VM"state""""FT_Long"""stack[MAX_OPERANDS];""//"execution"stack""""FT_Long*""top;""""""""""""""""""//"stack"pointer""""....""""T1_Decoder_Callback"""parse_callback;"//"func"pointer};JailbreakMeCVE-2011-0226//"execute"callothersubrcase"CALL_OTHER_SUBR:""""//"dispatch"and"call"subroutines""""...""""//"pop"out"arguments"from"the"stack""""decoderP>top"P="nargs;Did not validatenargs is in range
FreeType arbitrary code executionpush"0xfea50000"""";"nargs"="P347push"0x2a"""""""""";"subroutine"num"="42callothersubr"""""";"call"custom"function..."...MaliciousPDF file withembedded T1 fontstruct"T1_DecoderRec"{""""""""""""""//"T1"VM"state""""FT_Long"""stack[MAX_OPERANDS];""//"execution"stack""""FT_Long*""top;""""""""""""""""""//"stack"pointer""""....""""T1_Decoder_Callback"""parse_callback;"//"func"pointerJailbreakMe};CVE-2011-0226//"execute"callothersubrcase"CALL_OTHER_SUBR:""""//"dispatch"and"call"subroutines""""...""""//"pop"out"arguments"from"the"stack""""decoderP>top"P="nargs;Overwritefunction pointerDid not validatenargs is in range
Page 1 and 2:
Security Bugs inEmbedded Interprete
Page 3 and 4:
Embedded interpretersHost systemByt
Page 5 and 6:
Embedded interpretersHost systemByt
Page 7 and 8:
Prevalence of embedded interpreters
Page 9 and 10:
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Our contributions• Studies of 10
Page 17 and 18:
A packet filtering example• Monit
Page 19 and 20:
A packet filtering example• Monit
Page 21 and 22: A packet filtering example• Straw
Page 23 and 24: A packet filtering example• Straw
Page 25 and 26: Solution: Berkeley Packet Filter (B
Page 39 and 40: Security of embedded interpreters
Page 45 and 46: INET DIAG infinite loop vulnerabili
Page 51: INET DIAG infinite loop vulnerabili
Page 56 and 57: ClamAV signed division vulnerabilit
Page 64 and 65: FreeType arbitrary code executionJa
Page 66 and 67: FreeType arbitrary code executionpu
Page 74 and 75: Security guidelines
Page 76 and 77: Security guidelines• A better sol
Page 78 and 79: Pitfall 1: complex feature sets•
Page 80 and 81: Pitfall 1: complex feature sets•
Page 82 and 83: Pitfall 2: resource consumption•
Page 84 and 85: Pitfall 3: calls to the host system
Page 86 and 87: Research Opportunities
Page 88 and 89: Research Opportunities• Testing e
Page 90 and 91: Research Opportunities• Testing e
Page 92 and 93: References• BPF: S. McCanne and V
Page 94: Q & ASecurity Bugs inEmbedded Inter
show all

slides - PDOS - MIT

Create successful ePaper yourself

Delete template?

Save as template?