Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Plundervolt - Flipping Bits from Software Without Rowhammer

media.ccc.de via YouTube

Overview

Explore the Plundervolt attack, a software-based fault attack primitive that exploits privileged interfaces to undermine system security by manipulating processor frequency and voltage. Learn how this technique can be used to recover cryptographic keys and induce memory safety vulnerabilities in Intel SGX enclaves. Discover the implications of this vulnerability (CVE-2019-11157), its comparison to Rowhammer, and the challenges in mitigating such attacks. Gain insights into the research process, real-world attack scenarios, and the potential impact on trusted computing environments.

Syllabus

Intro
Clockscrew
VFS
TrustZone
Intel
Tools
Writing the code
How does it work
Rowhammer failed
AES
Plundervolt
Thunderbolt
QA
Is it practical
Hardware
Questions
Memory Access
Microcode update
Secure Enclave
Remote exploit

Taught by

media.ccc.de

Reviews

Start your review of Plundervolt - Flipping Bits from Software Without Rowhammer

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.