2018 EuroLLVM Developers’ Meeting: O. Benita Ben Simhon “Protecting the code ...” скачать в хорошем качестве

2018 EuroLLVM Developers’ Meeting: O. Benita Ben Simhon “Protecting the code ...”

http://llvm.org/devmtg/2018-04/ — Protecting the code: Control Flow Enforcement Technology - Oren Benita Ben Simhon, Intel Slides: http://prezi.com/rrnie8wt7oxc/?utm_ca... PDF Slides: http://llvm.org/devmtg/2018-04/slides... — Return-Oriented Programming (ROP), and similarly Call/Jump-Oriented Programming (COP/JOP), have been the prevalent attack methodology for stealth exploit writers targeting vulnerabilities in programs. Intel introduces Control-flow Enforcement Technology (CET) [1] which is a HW-based solution for protecting from gadget-based ROP/COP/JOP attacks. The new architecture deals with such attacks using Indirect Branch Tracking and Shadow Stack. The required support is implemented in LLVM and includes optimized lightweight instrumentation. This talk targets LLVM developers who are interested in new security architecture and methodology implemented in LLVM. Attendees will get familiar with basic control flow attacks, CET architecture and its LLVM compiler aspects. [1] https://software.intel.com/sites/defa... — Videos Filmed & Edited by Bash Films: http://www.BashFilms.com