Upload File

exploit techniques and mitigation

18
Techniques & Mi-ga-on Yaniv Shani

Upload: yaniv-shani

Post on 11-Feb-2017

47 views

Category:

Internet


6 download

Report

TRANSCRIPT

Page 1: Exploit techniques and mitigation

Techniques&Mi-ga-on

YanivShani

Page 2: Exploit techniques and mitigation

WhatisExploit?

Apieceofso=warethatleverageanapplica-onvulnerabilitytocauseunintendedapplica-onbehavior

Page 3: Exploit techniques and mitigation

ExploitsTechniques•  Stackoverflow•  SEHframeoverwrite•  Heapoverflow•  Ret2LibC•  ReturnOrientedPrograming•  JITSpraying•  BypasstheSandboxModel

Page 4: Exploit techniques and mitigation

Stackoverflow

Overwritethethereturnaddressonthestackwithapointertosomemaliciousshellcode

Page 5: Exploit techniques and mitigation

SEHFrameoverwrite

OverridetheSEHrecordstojumptotheshellcode

Page 6: Exploit techniques and mitigation

Heapoverflow

•  Overwritetheallocatedbufferinternallinkedlistpointers.

•  Usetheresul=ngpointerexchangetooverwriteprogramcounter.

Page 7: Exploit techniques and mitigation

•  Changethereturnaddressonthestacktoaknownfunc=oninasharedlibrary

•  Doesn’tincludeshellcode

Ret2LibC

Page 8: Exploit techniques and mitigation

ReturnOrientedPrograming

•  FormGadgetsbycombinevariousinstruc-ons.•  Gadgetperformhigh-levelac-on•  i.eVirtualAlloc(),SetProcessDEPPolicy()

Page 9: Exploit techniques and mitigation

JITSpraying•  MakeuseofthefactthatJITcompilergenerated

executablecodeatrun=me•  SprayingNOPslides,XORandshellcodeintomemory

Page 10: Exploit techniques and mitigation

BypasstheSandboxModel

•  Bypassthesecuritymechanism•  Enableuntrustedapplica-onanaccessto

underlyingsystemresources.

Page 11: Exploit techniques and mitigation

Mi-ga-ontechniques

•  StackProtec-on•  SafeSEH•  HeapProtec-on•  DEP•  ASLR

Page 12: Exploit techniques and mitigation

StackProtec-on

•  AddCanarybeforestackreturnpointer•  CheckCanary&terminateonmismatch

Page 13: Exploit techniques and mitigation

SafeSEH

•  ALink=meop=onthatgenerateatablewithallSEHthatwillbeusedbytheprogram

Page 14: Exploit techniques and mitigation

HeapProtec-on

•  Unlinkcheck•  Entryheadercookie•  Pointerencoding•  Randomizedmetadataandbaseaddress

Page 15: Exploit techniques and mitigation

DataExecu-onPreven-on

•  Preven=ngapplica=onfromexecu=ngcodefromnon-executablememoryregion

Page 16: Exploit techniques and mitigation

AddressSpaceLayoutRandomiza-on

•  Randomlyarrangingtheposi=onofkeydataarea(heap,stack,exec.,libraryspace).

Page 17: Exploit techniques and mitigation

MalwareProtec=onSolu=on

•  An=-Virus:Blacklistoffilesignature.•  Onlyeffec=veagainstknownthreads

•  Whitelis=ngandSandboxingsolu=on•  Hardtoimplement•  Requireconsistentmaintenance

•  Statefulapplica=oncontrol•  Automatedmalwareprotec=on•  ProtectfromzerodayaZack

Page 18: Exploit techniques and mitigation

ThankYou


Techniques for Mitigation of Reflective Cracks

REVIEW ON POWER QUALITY MITIGATION TECHNIQUES

Enhanced Mitigation Experience Toolkit 5...These pseudo mitigations are not robust enough to stop future exploit techniques, but can help prevent systems from being compromised by

Adaptive Impairment Mitigation Techniques for Satellite ... · Adaptive Impairment Mitigation Techniques for Satellite Communications. ... Signal scintillations Small-margin ... Instantaneous

Modern Document Exploit Techniquesmedia.blackhat.com/bh-us-11/Tsai/BH_US_11_TsaiPan... · •Advanced Fuzzing Techniques •Techniques to Against Exploit Mitigation Technologies •Techniques

Traffic Diversion Techniques for DDoS Mitigation

DDoS Mitigation Techniques - CHI-NOGchinog.org/.../06/CHI-NOG-03-DDoS-Mitigation-Techniques.pdf · 2014-06-15 · DDoS Mitigation Techniques Ron Winward, ServerCentral CHI-NOG 03

Hacker techniques, exploit and incident handling

1997: HIGH INTEGRITY MULTIPATH MITIGATION TECHNIQUES …

Exploit Mitigations - exploit.courses Mitigations Best Exploit Mitigation: (Security relevant-) Bugs should not exist at all Write secure code! Use secure libraries

Piratng Avs to bypass exploit mitigation

Voltage Sags Mitigation Techniques Analysis_10_march

LNCS 9404 - Preventing Exploits in Microsoft Office ...astavrou/research/DocRandom_RAID15.pdf · Our exploit mitigation techniques are similar in effect to address space ... possible

Writing Exploit-Resistant Code with OpenBSD · 27/4/2019  · Exploit Mitigation Techniques on OpenBSD (non-exhaustive) •Privilege separation •Privilege dropping •Stack protector

Attacks and Mitigation Techniques

Adaptive Impairment Mitigation Techniques for Satellite

Automatic Patch-Based Exploit Generation is Possible: Techniques and Implications

Linux Exploit Mitigation 1 - Compass Security · To understand exploit mitigations Need to understand exploit techniques I’ll lead ... Memory Corruption Types Memory Corruptions

Voltage Sags Mitigation Techniques Analysis

RFI Mitigation/Excision techniques - IUCAF

Variability mitigation techniques in nanometer CMOS

D3TLV17- Advanced DDoS Mitigation Techniques

Modeling Arc Flash Mitigation Techniques (SKM)

Wireless Channel Impairment Mitigation Techniques

Priority Aware Interference Mitigation Techniques For

Enhanced Mitigation Experience Toolkit 5 · The Enhanced Mitigation Experience Toolkit ... exploit vulnerabilities in computer systems, ... 7 Enhanced Mitigation Experience Toolkit

MITIGATION TECHNIQUES TO REDUCE

Exploit mitigation at the native level for RISC-based devices · 2019-08-26 · Neugschwandtner & Mulliner Exploit Mitigation at the Native Level for Embedded Devices Matthias Neugschwandtner

Lab 13: Mitigation and Deterrent Techniques - Password ...lpc1.clpccd.cc.ca.us/lpc/mdaoud/CNT69/NETLABS/Security_Plus_Lab_… · Lab 13: Mitigation and Deterrent Techniques ... Mitigation

Practical Exact Proofs from Lattices: New Techniques to Exploit … · 2020. 6. 10. · Practical Exact Proofs from Lattices: New Techniques to Exploit Fully-Splitting Rings? Muhammed

Mitigation Techniques for Unwanted Robocalls: … Techniques for Unwanted Robocalls: Updates on ATIS ... • Existing PSTN Class 5 TDM/SS7 equipment is at ... Mitigation Techniques

UL RSSI Mitigation Techniques

Chapter Two Mitigation Techniques

Interference mitigation techniques for clustered multicell ... · Interference mitigation techniques for clustered multicell joint decoding systems Symeon Chatzinotas1* and Björn

Interference mitigation techniques for 4G networks