Download pdf - From Concept to Deployment The Life (and Death) of ......Stack Cookies Smashing the Stack for Fun and Profit Aleph One 19971996 1998 1999 StackGuard: Automatic Adaptive Detection and

Transcript
Page 1: From Concept to Deployment The Life (and Death) of ......Stack Cookies Smashing the Stack for Fun and Profit Aleph One 19971996 1998 1999 StackGuard: Automatic Adaptive Detection and

January 25, 2016

Glenn Wurster

From Concept to Deployment The Life (and Death) of Security Features

BlackBerry Public

Page 2: From Concept to Deployment The Life (and Death) of ......Stack Cookies Smashing the Stack for Fun and Profit Aleph One 19971996 1998 1999 StackGuard: Automatic Adaptive Detection and

BlackBerry 1

Stack Cookies

Smashing the Stack for

Fun and Profit Aleph One

1997 1998 1999

StackGuard: Automatic Adaptive Detection

and Prevention of Buffer-Overflow Attacks Crispan Cowan et. al.

1996 2000 2002 2004 2006 2008 2010 2012 2014

Page 3: From Concept to Deployment The Life (and Death) of ......Stack Cookies Smashing the Stack for Fun and Profit Aleph One 19971996 1998 1999 StackGuard: Automatic Adaptive Detection and

BlackBerry 2

Stack Cookies

1996 1998 2000 2002 2004 2006 2008 2010 2012 2014

Attack

StackGuard

Linux Expo

StackGuard v2

ProPolice

Visual Studio

GCC Developers

Summit, v3

GCC Adopts

ProPolice

-fstack-protector-strong

Usenix

Test of Time

Fedora Core 5 Ubuntu SUSE Debian Arch

Page 4: From Concept to Deployment The Life (and Death) of ......Stack Cookies Smashing the Stack for Fun and Profit Aleph One 19971996 1998 1999 StackGuard: Automatic Adaptive Detection and

BlackBerry 3

Limiting Access to an Android Service

<permission

android:name=“android.permission.READ_CALL_LOG”

android:protectionLevel=“dangerous”

/>

<uses-permission

android:name=“android.permission.READ_CALL_LOG”

/>

Page 5: From Concept to Deployment The Life (and Death) of ......Stack Cookies Smashing the Stack for Fun and Profit Aleph One 19971996 1998 1999 StackGuard: Automatic Adaptive Detection and

BlackBerry 4

Selling Security Features

Is Entrepreneurship

Page 6: From Concept to Deployment The Life (and Death) of ......Stack Cookies Smashing the Stack for Fun and Profit Aleph One 19971996 1998 1999 StackGuard: Automatic Adaptive Detection and

BlackBerry 5

The Diaper Bag

Page 7: From Concept to Deployment The Life (and Death) of ......Stack Cookies Smashing the Stack for Fun and Profit Aleph One 19971996 1998 1999 StackGuard: Automatic Adaptive Detection and

BlackBerry 6

The Diaper Bag

1. Limited Space

2. Little/No Training

Page 8: From Concept to Deployment The Life (and Death) of ......Stack Cookies Smashing the Stack for Fun and Profit Aleph One 19971996 1998 1999 StackGuard: Automatic Adaptive Detection and

BlackBerry 7

Which would you want?

Page 9: From Concept to Deployment The Life (and Death) of ......Stack Cookies Smashing the Stack for Fun and Profit Aleph One 19971996 1998 1999 StackGuard: Automatic Adaptive Detection and

BlackBerry 8

The Diaper Bag

1. Limited Space

2. Little/No Training

3. Already Partially Filled

Page 10: From Concept to Deployment The Life (and Death) of ......Stack Cookies Smashing the Stack for Fun and Profit Aleph One 19971996 1998 1999 StackGuard: Automatic Adaptive Detection and

BlackBerry 9

Getting a Tool in the Diaper Bag

Page 11: From Concept to Deployment The Life (and Death) of ......Stack Cookies Smashing the Stack for Fun and Profit Aleph One 19971996 1998 1999 StackGuard: Automatic Adaptive Detection and

BlackBerry 10

Getting a Tool in the Diaper Bag

1.Replace something

2.Make it Small

3.Add to something

4.Put it on the baby

Page 12: From Concept to Deployment The Life (and Death) of ......Stack Cookies Smashing the Stack for Fun and Profit Aleph One 19971996 1998 1999 StackGuard: Automatic Adaptive Detection and

BlackBerry 11

Tipping Points

1. Get it in the Diaper Bag

2. Legislative Changes

3. Public Pressure

Page 13: From Concept to Deployment The Life (and Death) of ......Stack Cookies Smashing the Stack for Fun and Profit Aleph One 19971996 1998 1999 StackGuard: Automatic Adaptive Detection and

Recommended

Smashing The Stack For Fun And Profit - EECS @ Michigan · Smashing The Stack For Fun And Profit by Aleph One aleph1@underground.org `smash the stack` ... Intel x86 CPU, and that
Smashing The Stack For Fun And Profit - EECS @ Michigan · Smashing The Stack For Fun And Profit by Aleph One [email protected] `smash the stack` ... Intel x86 CPU, and that Documents
Vitaly Shmatikov Buffer Overflow and Stack Smashing slide 1
Vitaly Shmatikov Buffer Overflow and Stack Smashing slide 1 Documents
Buffer Overflows - Swarthmore Collegekwebb/cs31/f18/BufferOverflow.pdf•See “Smashing The Stack For Fun And Profit” … Older stack frames. … Caller’s local variables. Final
Buffer Overflows - Swarthmore Collegekwebb/cs31/f18/BufferOverflow.pdf•See “Smashing The Stack For Fun And Profit” … Older stack frames. … Caller’s local variables. Final Documents
Stack Protection Systems: (propolice, StackGuard, XP SP2)
Stack Protection Systems: (propolice, StackGuard, XP SP2) Documents
CS 201 Stack smashing
CS 201 Stack smashing Documents
Buffer Overflow and Stack Smashing
Buffer Overflow and Stack Smashing Documents
Stack Smashing as of Today - Black Hat | Home
Stack Smashing as of Today - Black Hat | Home Documents
CS 201 Stack smashing. – 2 – Stack smashing (buffer overflow) One of the most prevalent remote security exploits 2002: 22.5% of security fixes provided
CS 201 Stack smashing. – 2 – Stack smashing (buffer overflow) One of the most prevalent remote security exploits 2002: 22.5% of security fixes provided Documents
Smashing The Stack For Fun And Profit Aleph One
Smashing The Stack For Fun And Profit Aleph One Documents
Smashing The Stack - University of RichmondSummer 2017 Roadmap 1 Smashing The Stack A detailed look at buffer overflows as described in Smashing the Stack for Fun and Profit by Aleph
Smashing The Stack - University of RichmondSummer 2017 Roadmap 1 Smashing The Stack A detailed look at buffer overflows as described in Smashing the Stack for Fun and Profit by Aleph Documents
Smashing the Stack Overview The Stack Region Buffer Overflow Shell Program Notes Avoiding Buffer Overflows Conclusion
Smashing the Stack Overview The Stack Region Buffer Overflow Shell Program Notes Avoiding Buffer Overflows Conclusion Documents
VoIPER: Smashing the VoIP stack while you sleep
VoIPER: Smashing the VoIP stack while you sleep Technology
Stack Smashing Protector - Hackito Ergo Sum · 2010. 4. 16. · Stack Smashing Protector Paul Rascagneres (aka RootBSD) - - Licensed Beerware – HES2010 1. Introduction - GCC extension
Stack Smashing Protector - Hackito Ergo Sum · 2010. 4. 16. · Stack Smashing Protector Paul Rascagneres (aka RootBSD) - - Licensed Beerware – HES2010 1. Introduction - GCC extension Documents
Smashing the Stack in 2011 | my 20%rdriley/487/papers/Makowski_2011... · 2019. 5. 30. · Smashing the Stack for Fun and Profit article which had originally appeared in Phrack and
Smashing the Stack in 2011 | my 20%rdriley/487/papers/Makowski_2011... · 2019. 5. 30. · Smashing the Stack for Fun and Profit article which had originally appeared in Phrack and Documents
Stack&Smashing& Attacks - George Mason Universityastavrou/courses/ISA_564_F15/... · This&won’t&work&today • The$attack$described$is$a$classical$stack$smashing$attack$which$then$
Stack&Smashing& Attacks - George Mason Universityastavrou/courses/ISA_564_F15/... · This&won’t&work&today • The$attack$described$is$a$classical$stack$smashing$attack$which$then$ Documents
Stack smashing
Stack smashing Documents
Buffer Overflow Attackscshen/367/notes/Buffer Overflow.pdf · 2016. 2. 9. · Stack Buffer Overflow • Occur when buffer is located on stack – also referred to as stack smashing
Buffer Overflow Attackscshen/367/notes/Buffer Overflow.pdf · 2016. 2. 9. · Stack Buffer Overflow • Occur when buffer is located on stack – also referred to as stack smashing Documents
Buffer Overflows - Swarthmore CollegeClassic Security Vulnerability •“Smashing The Stack For Fun And Profit” … Older stack frames. … Caller’s local variables. Final Argument
Buffer Overflows - Swarthmore CollegeClassic Security Vulnerability •“Smashing The Stack For Fun And Profit” … Older stack frames. … Caller’s local variables. Final Argument Documents