How a No-Write Can Compromise System Security
Kenneth Huang Shaoqi examines compilers generate all our code, but they don’t get it right all the time.
Summary
Architecture and Background
Kenneth Huang Shaoqi present 'How a No-Write Can Compromise System Security' at DEF CON SG1 CSIT Village, detailing technical frameworks, attack surfaces, and core methodologies in compiler-security, binary-exploitation, vulnerability-research, software-security.
Vulnerability Analysis
The technical analysis dissects structural design flaws, protocol vulnerabilities, and edge cases uncovered during rigorous research.
Exploitation and Demonstrations
Compilers generate all our code, but they don’t get it right all the time. In this talk, we’ll introduce how compilers can affect software security in general, before going deep into a V8 optimization n-day from the perspective of a vulnerability researcher.
Remediation and Defensive Strategies
Security practitioners and defenders receive actionable defensive controls, hardened configurations, and threat detection strategies to mitigate impact.
Related talks
CSIT Village·30 min
Chua Meng Han
Chua Meng Han examines critical vulnerabilities like CVE-2025-52691 remind us that “low-hanging fruit” still exists today.
CSIT Village·22 min
Koh Kian Woon
Koh Kian Woon examines as AI accelerates development and increases system complexity, robust defence-in-depth and deep technical expertise are becoming increasingly critical for defenders.
Main Stage·42 min
Adam Zabrocki · Alex Tereshkin
Adam Zabrocki and Alex Tereshkin examine software exploitation in formally verified systems, identifying design flaws and specification gaps that bypass proofs.