27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)

推荐理由

For an amazing technical deep dive into each 0-day Stuxnet vulnerability watch this talk with Bruce Dang from Microsoft[1].

强烈推荐nodesocket · 原文2021年6月

说明

这是2010年由basti0007发布的一部演讲，主题归在Security & hacking。它讲的是stuxnet analysis这一支里的具体问题，而不是把整个领域扫一遍。适合想看推导、证明或实现细节的人。内容上可以概括成：Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed. He walks through the techniques used to triage them and the details of each zero-day exploit, down to the opcode level.这些读者给出的理由，核心是：HN recommends it as the definitive technical deep dive into Stuxnet's zero-days from someone who analyzed it first-hand.讲法不绑某一条新闻，过几年仍然可以当材料看。从2011年到2024年，有8位不同的读者在7个不同月份把它推荐出来，其中明确叫别人去看的有4次。适合一次性看完。讲者把一个判断讲透，演示是在给这个判断配例子。如果已经会了基本定义，就把注意力放在它怎么把stuxnet analysis变成能跟着复述的例子。

视频信息

频道

basti0007

时长

1 小时 14 分

发布年份

2010

同主题更多

• Behind the Scenes of iOS Security
• Why Electronic Voting Is Still A Bad Idea
• USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
• Defcon 18 Changing threats to privacy Moxie Marlinspike Part
• 28c3: The Science of Insecurity
• DEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome