No Hat 2020 - Alexander Ermolov & Dmitriy Frolov
Industry experts analyze emerging threats surrounding No Hat 2020 - Alexander Ermolov & Dmitriy Frolov - Exploiting vulnerabilities in Intel ACMs.
Summary
Security analysis and exploitation of Intel Authenticated Code Modules used by Boot Guard, TXT SINIT, and BIOS Guard. ACMs are signed binaries loaded from CPU microcode; vulnerabilities can undermine TXT, Boot Guard, BIOS Guard, and SGX. Discusses reverse engineering encrypted ACMs and extracting decrypted images from L3 cache.
Related talks
OffensiveCon·32 min
Alexander Ermolov
20 - Alexander Ermolov - Untrusted Roots: exploiting vulnerabilities in Intel ACMs.
Hacktivity - IT Security Festival·52 min
Alexander Polyakov
Analysts investigate attack surfaces and defenses concerning Hacktivity 2012 - Alexander Polyakov - Top 10 most interesting SAP vulnerabilities and attacks.
BITM Hacklab·37 min
Mathias Payer
Industry experts analyze emerging threats surrounding No Hat 2021 - Mathias Payer - Fuzzing for profit: from crashes to vulnerabilities.