Analyzing & Breaking QNX Exploit Mitigations and PRNGs for Embedded Systems

Analyzing & Breaking QNX Exploit Mitigations and PRNGs for Embedded Systems

Black Hat via YouTube Direct link

Medical: Surgical Robots

5 of 47

5 of 47

Medical: Surgical Robots

Class Central Classrooms beta

YouTube videos curated by Class Central.

Classroom Contents

Analyzing & Breaking QNX Exploit Mitigations and PRNGs for Embedded Systems

Automatically move to the next video in the Classroom when playback concludes

  1. 1 Intro
  2. 2 Automotive: BlackBerry Radar
  3. 3 Industrial: Nuclear HMI
  4. 4 Defense: Military Radios QNX Secures Major Design Win in Software Defined Radio
  5. 5 Medical: Surgical Robots
  6. 6 Carrier Routers: Cisco IOS-XR
  7. 7 Many more critical systems
  8. 8 What's New?
  9. 9 QNX Microkernel Architecture
  10. 10 QNX IPC Message Passing
  11. 11 QNX Attack Surface
  12. 12 QNX Security History
  13. 13 Syscalls
  14. 14 QNX Boot Process Power on
  15. 15 QNX Firmware
  16. 16 QNX Memory Layout - Nemespace - Userspace Separation
  17. 17 QNX User Management
  18. 18 QNX Process Management
  19. 19 QNX Process Abilities Limitations
  20. 20 Breaking' Rootless Execution
  21. 21 Qnet (Native Networking / TDP)
  22. 22 Qnet Security
  23. 23 Qnet EOP Vulnerability (CVE-2017-3891)
  24. 24 QNX Debugging
  25. 25 PRNG Quality
  26. 26 QNX Security-Oriented PRNGs
  27. 27 QNX 7 /dev/random
  28. 28 QNX 7 Kernel PRNG
  29. 29 Exploit Mitigation Quality
  30. 30 QNX Exploit Mitigations
  31. 31 QNX DEP
  32. 32 QNX ASLR - map_find_va
  33. 33 QNX ASLR - stack_randomize
  34. 34 QNX 6 ASLR - Weak RNG
  35. 35 QNX 6 ASLR - Bruteforcing
  36. 36 QNX 6 ASLR - procfs Infoleak (CVE-2017-3892)
  37. 37 QNX 6 ASLR-LD DEBUG Infoleak (CVE-2017-9369)
  38. 38 QNX 7 ASLR - Changes
  39. 39 QNX Stack Canaries
  40. 40 QNX 6 SSP - Weak RNG
  41. 41 QNX 6 SSP - Kernelspace
  42. 42 QNX 7 SSP - Changes
  43. 43 Relocation Read-Only (RELRO) to do
  44. 44 QNX 6 Broken RELRO (CVE-2017-3893)
  45. 45 QNX 6 RELRO
  46. 46 Patches
  47. 47 Conclusions

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.