YoVDO

Breaking Hardware-Enforced Security With Hypervisors

Offered By: Black Hat via YouTube

Tags

Black Hat Courses Cybersecurity Courses Remote Attestation Courses

Course Description

Overview

Explore a groundbreaking Black Hat conference talk that delves into the vulnerabilities of hardware-enforced security mechanisms. Learn how hypervisors can be exploited to bypass Intel's Trusted Execution Environment (TXT) DRTM and capture keys from Intel's AES-NI instructions. Discover the limitations of trusted computing technologies like TXT, ARM TrustZone, Microsoft Isolated User Mode, and Intel SGX in protecting user data from privileged processes. Examine the implementation flaws in Intel TXT and the open-source tBoot project, and understand how Type-1 hypervisors can be used to exploit these weaknesses. Gain insights into proper deployment strategies for hardware-enforced security systems, including sealed storage, remote attestation, and hardware hardening techniques to mitigate potential vulnerabilities.

Syllabus

Breaking Hardware-Enforced Security With Hypervisors


Taught by

Black Hat

Related Courses

Exploring Modern and Secure Operations of Kubernetes Clusters on the Edge
Open Data Science via YouTube
Using the Observer Effect and Cyber Feng Shui - Jacob Torrey
Hack In The Box Security Conference via YouTube
OAT - Attesting Operation Integrity of Embedded Devices
IEEE via YouTube
The Remote Working Security Conundrum - What Is Reasonably Secure Anyway?
USENIX via YouTube
Riverbed - Enforcing User-defined Privacy Constraints in Distributed Web Services
USENIX via YouTube