The Memory Sinkhole - Unleashing An X86 Design Flaw Allowing Universal Privilege Escalation

推荐理由

There was a blackhat talk on embedding malware in SMM and triggering it with a magic number written to a register

引用kogepathic · 原文2017年11月

说明

这是2015年由Black Hat发布的一部演讲，主题归在Security & hacking。它讲的是x86 system management mode exploits这一支里的具体问题，而不是把整个领域扫一遍。适合想看推导、证明或实现细节的人。内容上可以概括成：Christopher Domas's Black Hat 2015 talk on a long-unnoticed x86 design flaw that lets an attacker reach System Management Mode, a ring below the OS. It explains how the legacy architecture allows universal privilege escalation and persistent, hard-to-detect malware.这些读者给出的理由，核心是：Cited in discussions of CPU hidden features, Intel's security failures and SMM malware as a concrete example of a forgotten processor feature being exploited.讲法不绑某一条新闻，过几年仍然可以当材料看。从2017年到2022年，有1位不同的读者在1个不同月份把它推荐出来，其中明确叫别人去看的有0次。适合一次性看完。讲者把一个判断讲透，演示是在给这个判断配例子。如果已经会了基本定义，就把注意力放在它怎么把x86 system management mode exploits变成能跟着复述的例子。

视频信息

频道

Black Hat

时长

46 分 34 秒

发布年份

2015

同主题更多

• Behind the Scenes of iOS Security
• Why Electronic Voting Is Still A Bad Idea
• USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
• Defcon 18 Changing threats to privacy Moxie Marlinspike Part
• 28c3: The Science of Insecurity
• DEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome