Who are we? Jos Wetzels Ali Abbasi


No prior work on Exploit Mitigations or PRNGs



Download 10,05 Mb.
bet3/11
Sana27.10.2022
Hajmi10,05 Mb.
#857052
1   2   3   4   5   6   7   8   9   10   11
Bog'liq
wetzels dissecting qnx infiltrate 2018 (1)

  • No prior work on Exploit Mitigations or PRNGs
  • Almost no prior work on internals

  • * QNX: 99 Problems but a Microkernel ain’t one! - Alex Plaskett et al., 2016

    QNX Boot Process

    QNX Boot Process

    • Initial Program Loader (IPL) copies Image Filesystem (IFS) to RAM
    • Startup (startup-*) program configures system (interrupt controllers, etc.)
    • Microkernel (procnto) sets up kernel, runs buildfile (boot script for drivers and OS components)

    QNX Firmware

    QNX Firmware

    • Various QNX OS packages (Car, Safety, Medical)
      • Same Neutrino microkernel and core service binaries
    • QNX images come in three flavors
      • OS image (IFS)
      • Flash filesystem image (EFS)
      • Embedded transaction filesystem image (ETFS)

    QNX Firmware

    QNX Firmware

    • IFS + EFS + ETFS can be combined into single image on eg. NAND Flash

    QNX Firmware

    QNX Firmware

    QNX Memory Layout

    QNX Memory Layout

    • Kernelspace – Userspace Separation
      • Only microkernel runs in kernelspace
    • Userspace separation of sensitive (OS, driver, etc.) code from regular applications

    QNX User Management

    QNX User Management

    • Typical Unix user & file permissions model
    • QNX 6 hashes
      • SHA256, SHA512 (default)
      • But also: MD5, DES crypt, qnx_crypt (legacy QNX 4, invertible…)
    • Cracked root / maintenance pw can have high shelf-life on embedded…
    • QNX 7 or patched 6.6 hashes
      • PBKDF2-SHA256/SHA512

    Download 10,05 Mb.

    Do'stlaringiz bilan baham:
    1   2   3   4   5   6   7   8   9   10   11




    Ma'lumotlar bazasi mualliflik huquqi bilan himoyalangan ©hozir.org 2024
    ma'muriyatiga murojaat qiling

    kiriting | ro'yxatdan o'tish
        Bosh sahifa
    юртда тантана
    Боғда битган
    Бугун юртда
    Эшитганлар жилманглар
    Эшитмадим деманглар
    битган бодомлар
    Yangiariq tumani
    qitish marakazi
    Raqamli texnologiyalar
    ilishida muhokamadan
    tasdiqqa tavsiya
    tavsiya etilgan
    iqtisodiyot kafedrasi
    steiermarkischen landesregierung
    asarlaringizni yuboring
    o'zingizning asarlaringizni
    Iltimos faqat
    faqat o'zingizning
    steierm rkischen
    landesregierung fachabteilung
    rkischen landesregierung
    hamshira loyihasi
    loyihasi mavsum
    faolyatining oqibatlari
    asosiy adabiyotlar
    fakulteti ahborot
    ahborot havfsizligi
    havfsizligi kafedrasi
    fanidan bo’yicha
    fakulteti iqtisodiyot
    boshqaruv fakulteti
    chiqarishda boshqaruv
    ishlab chiqarishda
    iqtisodiyot fakultet
    multiservis tarmoqlari
    fanidan asosiy
    Uzbek fanidan
    mavzulari potok
    asosidagi multiservis
    'aliyyil a'ziym
    billahil 'aliyyil
    illaa billahil
    quvvata illaa
    falah' deganida
    Kompyuter savodxonligi
    bo’yicha mustaqil
    'alal falah'
    Hayya 'alal
    'alas soloh
    Hayya 'alas
    mavsum boyicha


    yuklab olish