Who are we? Jos Wetzels Ali Abbasi


BlackBerry QNX Hypervisor BlackBerry QNX Hypervisor



Download 10,05 Mb.
bet2/11
Sana27.10.2022
Hajmi10,05 Mb.
#857052
1   2   3   4   5   6   7   8   9   10   11
Bog'liq
wetzels dissecting qnx infiltrate 2018 (1)

BlackBerry QNX Hypervisor

BlackBerry QNX Hypervisor

  • Safety-Certified Type 1 hypervisor based on QNX Neutrino Microkernel
    • Hypervisor 1.0 (2015) based on 32-bit QNX SDP 6.x
    • Hypervisor 2.0 (2017) based on 64-bit QNX SDP 7.0
  • Hardware virtualization support (VT-x, ARMv8 virtualization)
  • VirtIO guest communication

Many more critical systems

Many more critical systems

  • Industrial Control Systems
    • Caterpillar Surface Mining Control
    • GE Mark VI Turbine Controller
    • Novar HVAC
    • Fortna Warehouse Control
    • Emerson Ovation DCS
  • Defense & Aerospace
    • UAVs
    • Anti-Tank Guidance
    • Autonomous Underwater Vehicles
    • Aerospace System-on-Modules (SoMs)
    • Satellite Systems
  • Rail Safety (MEN MTCS)
  • MPRI Cancer Therapy
  • Etc.

What’s New?

What’s New?

  • Wheel of Fortune’ @ 33C3
    • PRNG issues in VxWorks, RedactedOS, QNX <= 6.6
  • This talk
    • New QNX 7 userspace & kernelspace PRNGs
    • Exploit Mitigations in QNX 6 & 7

OS & Security Architecture

QNX Microkernel Architecture

QNX Microkernel Architecture

QNX IPC Message Passing

QNX IPC Message Passing

QNX Attack Surface

QNX Attack Surface

QNX Security History

QNX Security History

  • BlackBerry Mobile Research (2011 - 2014)
    • Alexander Antukh, Ralf-Philipp Weinmann, Daniel Martin Gomez, Zach Lanier et al.
  • QNX IPC, PPS, Kernel Calls (2016)
    • Alex Plaskett et al.
  • Various individual vulnerabilities (2000 – 2008)
    • Anakata, Julio Cesar Fort, Tim Brown
  • Observations
    • Lots of setuid logic bugs (ifwatchd, pppoectl)
    • Lots of memory corruption (std utils, Photon GUI, PPPoEd)
    • Lots of insecure permissions (ptrace, Photon, /etc/ configs)

    • Download 10,05 Mb.

      Do'stlaringiz bilan baham:
1   2   3   4   5   6   7   8   9   10   11




Ma'lumotlar bazasi mualliflik huquqi bilan himoyalangan ©hozir.org 2024
ma'muriyatiga murojaat qiling

kiriting | ro'yxatdan o'tish
    Bosh sahifa
юртда тантана
Боғда битган
Бугун юртда
Эшитганлар жилманглар
Эшитмадим деманглар
битган бодомлар
Yangiariq tumani
qitish marakazi
Raqamli texnologiyalar
ilishida muhokamadan
tasdiqqa tavsiya
tavsiya etilgan
iqtisodiyot kafedrasi
steiermarkischen landesregierung
asarlaringizni yuboring
o'zingizning asarlaringizni
Iltimos faqat
faqat o'zingizning
steierm rkischen
landesregierung fachabteilung
rkischen landesregierung
hamshira loyihasi
loyihasi mavsum
faolyatining oqibatlari
asosiy adabiyotlar
fakulteti ahborot
ahborot havfsizligi
havfsizligi kafedrasi
fanidan bo’yicha
fakulteti iqtisodiyot
boshqaruv fakulteti
chiqarishda boshqaruv
ishlab chiqarishda
iqtisodiyot fakultet
multiservis tarmoqlari
fanidan asosiy
Uzbek fanidan
mavzulari potok
asosidagi multiservis
'aliyyil a'ziym
billahil 'aliyyil
illaa billahil
quvvata illaa
falah' deganida
Kompyuter savodxonligi
bo’yicha mustaqil
'alal falah'
Hayya 'alal
'alas soloh
Hayya 'alas
mavsum boyicha


yuklab olish