▼
Showing posts with label Kernel. Show all posts
Showing posts with label Kernel. Show all posts
Friday, January 16, 2015

How to defend against Stack Pivoting attacks on existing 32-bit x86 processor architecture?

›
Stack Pivoting is a common technique widely used by vulnerability exploits to bypass hardware protections like NX/SMEP, or to chain ROP ( Re...
5 comments:
Friday, November 21, 2014

Defending Against ret2dir Attacks (partially) with Virtualization Technology?

›
I was so excited when recently reading the paper ( ret2dir: Rethinking Kernel Isolation ) from  Vasileios P. Kemerlis . This post is basical...

Improve Performance for Separating Kernel and User Address Space with Process-Context Identifiers (PCIDs)

›
This post is not talking about any new idea, just about what I'm thinking..
Tuesday, November 18, 2014

Page Table Structure Corruption Attacks - How to Mitigate it?

›
On x86 and many other processor architectures (with MMU), page tables are critical data structures for address translations. And many hardwa...
Sunday, November 02, 2014

Security OS Design (cont.): Write Protection for Linux Kernel critical data structures (GDT, IDT, syscall table, task_strcture, mm_struct,...)

›
To be continued for previous post , let me review what must be changed in Linux kernel in order to prevent buffer overrun/overflow attacks f...
Sunday, October 26, 2014

An OS Kernel Bug in Windows 8.1 32-bit OS When Handling Task Switch Events

›
I'm not sure if this kernel bug that I reported in last year has been fixed in the latest Win8.1 32bit system. The bug is : any  NMI (N...
Thursday, October 16, 2014

Is this a good security design in Linux kernel? -- connections between thread_info and kernel stack

›
In Linux kernel, thread_info is a small CPU-specific data structure that stores some low-level task data for corresponding process, it also...