Главная
Study mode:
on
1
Introduction
2
Overview
3
Prior vulnerabilities
4
Dynamic and static analysis
5
Positive results
6
Vulnerability analysis
7
Initial vulnerabilities
8
Vulnerability types
9
Cpip stack
10
ipv6 extension headers
11
destination options extension header
12
heap buffer overflow
13
highlevel overview
14
proof of concept
15
lessons learned
16
examples
17
consequences
Description:
Explore the rise of critical vulnerabilities in embedded TCP/IP stacks in this 37-minute Black Hat conference talk. Delve into the reasons behind the recent discovery of long-standing vulnerabilities, examining their direct, unauthenticated, and cross-perimeter network exposure. Learn about dynamic and static analysis techniques used to uncover these issues, and understand the types of vulnerabilities found, including heap buffer overflows and IPv6 extension header vulnerabilities. Gain insights from real-world examples, analyze the consequences of these vulnerabilities, and discover valuable lessons learned from the research conducted by security experts Amine Amri, Stanislav Dashevskyi, Daniel dos Santos, and Jos Wetzels.

How Embedded TCP-IP Stacks Breed Critical Vulnerabilities

Black Hat
Add to list
0:00 / 0:00