SIMPLE IS BETTER
(Move to ...)
About me
Twitter
Github
▼
Showing posts with label
LBR
.
Show all posts
Showing posts with label
LBR
.
Show all posts
Monday, December 15, 2014
Using LBR (Last Branch Record) feature to detect ret2usr (return-to-user) attack w/ MMU paging structure corruption
›
SMEP (Supervisor Mode Execution Prevention) is a mitigation that aims to prevent the CPU from running code from user-mode while in kernel-mo...
Saturday, November 08, 2014
Using LBR (Last Branch Record) Feature to Detect IDT-Shadowing-Based Malicious IDT Hooking
›
Thanks to Yushi who shared a presentation ( ELI: Bare-Metal Performance for I/O Virtualization ) with me. In that hypervisor (ELI), it inno...
›
Home
View web version
