Kartograph : Finding a Needle in a Haystack
Elie Bursztein and Jocelyn Lagarenne explores kartograph : finding a needle in a haystack at DEF CON 18, examining malware-analysis and practical defenses.
Summary
Architecture and Background
Elie Bursztein & Jocelyn Lagarenne - Kartograph : Finding a Needle in a Haystack or How to Apply Reverse Engineering Techniques to Cheat at Video Games While we were slaving away hacking an awesome memory analysis tool, Kartograph, our lazy graduate student friends next door were busy honing their skills in CIV 4, Age of Empire III, Anno, C&C, and WarCraft III. They did not anticipate that we could use Kartograph to own them in these games. This talk shows how we turned the tables on them by using Kartograph to build 0-day cheats. Kartograph is a tool designed to reverse-engineer the memory structure of games, applying analysis and visualization techniques to find small chunks of valuable information within large process footprints (like a needle in a haystack). As a proof of concept, we used Kartograph to extract the relevant 256KB chunks from 1+GB processes and built what is considered the most difficult cheat to build: a map-hack.
Vulnerability Analysis
We will show a live demo of how Kartograph works and some cool cheats we built with it for CIV4, AoE3, Anno, and WarIII. If you want to learn about memory forensic techniques, or if you want to cheat at these popular games, you don't want to miss this talk. Elie Bursztein is a researcher at the Stanford Computer Security Lab. He holds a PhD in computer science and an Engineering degree in computer systems, networks and security. His research focus is offensive technologies, mobile and web security.
Exploitation and Demonstrations
He enjoy applying game theory, machine learning and data mining techniques to security. Jocelyn Lagarenne is a student at the Stanford Computer Security Lab. He holds an Engineering degree in computer systems, networks and security. His research focus on system and network security. Dan Boneh heads the applied crypto group at the Computer Science department at Stanford University.
Remediation and Defensive Strategies
Dr. Boneh's research focuses on applications of cryptography to computer security. He is a recipient of the Packard Award, the Alfred P. Sloan Award, and the RSA Award. For copies of the slides and additional materials please see the DEF CON 18 Archive here:
Related talks
Main Stage·49 min
Jon McCoy
Jon McCoy explores hacking .net applications: the black arts at DEF CON 19, examining malware-analysis and practical defenses.
Main Stage·43 min
Chaos Computer Club
Chaos Computer Club explores chaosvpn for playing ctfs at DEF CON 18, examining malware-analysis and practical defenses.
Main Stage·49 min
Lineberry · Richardson · and Wyatt
Lineberry and Richardson details anthony Lineberry, David Luke Richardson & Tim Wyatt - These Aren't the Permissions You're Looking For The rise of the robot revolution is among us.