Data Hiding in Your Application - Securing Sensitive Information
Learn techniques for concealing sensitive data in applications, including garbage collection, marshalling, and the "Secret Highway" method. Explore practical examples and solutions.
Read-only Rootfs: Theory and Practice for Embedded Systems
Explore techniques for implementing read-only rootfs in embedded systems, enhancing robustness and facilitating system updates. Learn to manage state storage and overcome challenges in real-world scenarios.
Exporting Virtual Memory as DMAbuf - Challenges and Solutions
Explore challenges and solutions for integrating legacy drivers and RTOS applications with Linux, focusing on exporting virtual memory as dmabuf for efficient buffer sharing across drivers.
Securing C Code That Seems to Work Fine
Explore strategies for securing C codebases in high-performance environments, balancing best practices with startup culture. Learn from real-world successes and failures in implementing application security controls.
Use After Free Exploitation - Detecting and Exploiting Heap Vulnerabilities
Explore Use After Free vulnerabilities, their detection, and exploitation in web browsers. Learn about memory leaks and ASLR bypass techniques from an industry expert.
The Path Towards Automated Heap Exploitation
Explore automated heap exploitation techniques and strategies for enhancing cybersecurity defenses in this insightful conference talk by Thaís Moreira Hamasaki.
Meltdown and Spectre - Professor Mark Handley, UCL
Comprehensive explanation of Meltdown and Spectre vulnerabilities in modern CPUs, their impact on computer systems, and mitigation strategies. Explores CPU architecture, speculative execution, and side-channel attacks.
Subsystems with Object Lifetime Issues in Embedded Systems
Explore object lifetime issues in Linux subsystems, focusing on embedded systems. Understand the problem, affected subsystems, and potential solutions for kernel stability and reliability.
Efficient and Practical Capturing of Crash Data on Embedded Systems
Learn to capture crash data efficiently on embedded systems using minicoredumper, reducing core dumps to 4KB while maintaining usefulness for debugging applications.
Exploit Engineering: Attacking the Linux Kernel
Explore Linux kernel exploitation techniques, from attack surface mapping to vulnerability discovery and exploit development. Gain insights into advanced kernel exploitation methods and tools.
Finding Eviction Sets at Scale - Prune+PlumTree Method
Explore efficient techniques for finding eviction sets at scale using the 9 Prune+PlumTree method, enhancing understanding of cache side-channel attacks and defenses.
A Difference World: High-performance, NVM-invariant, Software-only Intermittent Computation
Explores innovative approach to intermittent computation for energy harvesting devices, introducing Camel system for efficient state management and improved performance on Flash-based platforms.
Limitations and Opportunities of Modern Hardware Isolation Mechanisms
Explores recent CPU hardware isolation mechanisms, analyzing their advantages and limitations for low-overhead system security across various computing domains.
SLUB Internals for Exploit Developers
Explore SLUB allocator internals and slab memory shaping strategies for Linux kernel exploit development. Gain insights into controlling memory corruption and implementing effective exploit techniques.
CIAPO - Code Injection via Arbitrary Pointer Overwrite
Explore code injection via arbitrary pointer overwrite in this cybersecurity presentation. Learn about vulnerabilities, hacking techniques, and defensive strategies from a Bitdefender security researcher.
Optimizing a Real-Time Audio Processing Library
Optimize real-time audio processing libraries with practical strategies, measurement techniques, and performance-enhancing tricks. Gain tools for confident code optimization across platforms.
Blasting Past WebP - Exploring Image Format Vulnerabilities
Explore advanced techniques for bypassing WebP image format security measures, uncovering vulnerabilities and potential exploits in web applications.
The V8 Heap Sandbox - Understanding JavaScript Engine Security
Explore V8 engine's heap sandbox implementation, its security implications, and potential vulnerabilities in Chrome's JavaScript engine.
Beyond Android MTE: Navigating OEM's Logic Labyrinths
Explore advanced Android security, focusing on Memory Tagging Extension (MTE) and OEM-specific implementations. Gain insights into exploiting vulnerabilities in custom logic.
MnemOS - A Memory Management Operating System for IoT Devices
Explore MnemOS, a novel operating system for embedded devices, and its potential impact on IoT development and resource-constrained environments.
Emulating CXL with QEMU - Development and Testing Guide
Discover how to emulate CXL features in QEMU for open source development, including setup guidance for Linux environments and understanding current limitations of CXL emulation.