YoVDO

Enter Sandbox

Offered By: Black Hat via YouTube

Tags

Black Hat Courses Security Vulnerabilities Courses Return-oriented Programming Courses

Course Description

Overview

Explore the intricacies of application sandboxing in this 35-minute Black Hat conference talk. Delve into the challenges of automatically generating seccomp filters for Linux applications to mitigate potential attacks. Learn about Linux seccomp filtering, its implementation challenges, and innovative solutions like Sourcalyzer, Binalyzer, and Finalyzer. Discover how these tools can extract system calls, set up filters, and improve application security. Examine the performance, functional correctness, and security implications of these techniques, including their effectiveness against real-world exploits like return-oriented programming. Gain valuable insights into enhancing application security in increasingly complex software environments.

Syllabus

Intro
Motivation
Linux Seccomp
Seccomp BPF
libseccomp
Challenges
Sourcalyzer
Call Graph Example
Key Aspects
Binalyzer: Overview
System Call Mapping
Finalyzer: Overview
libchestnut
ChestnutPatcher and Chestnut Generator
Evaluation: Performance
Evaluation: Seccomp
Evaluation: Functional Correctness
Evaluation Security
Mitigating Real-World Exploits
Return-oriented programming
Recap


Taught by

Black Hat

Related Courses

Evaluation of the Executional Power in Windows Using Return Oriented Programming
IEEE via YouTube
Spectre Attacks Exploiting Speculative Execution
IEEE via YouTube
Return to the Zombie Gadgets - Undermining Destructive Code Reads via Code-Inference Attacks
IEEE via YouTube
ROP is Still Dangerous - Breaking Modern Defenses
USENIX via YouTube
How to Cook Cisco: Exploit Development for Cisco IOS - George Nosenko - Ekoparty Security Conference - 2017
Ekoparty Security Conference via YouTube