Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Layers on Layers - Bypassing Security for Fun and Profit V2

Security BSides London via YouTube

Overview

Save Big on Coursera Plus. 7,000+ courses at $160 off. Limited Time Only!
Explore the vulnerabilities of Windows-based endpoint security solutions in this eye-opening conference talk. Delve into the world of kernel-mode malicious code and its ability to bypass multiple layers of security software. Learn how a public exploit for the EPATHOBJ Windows kernel vulnerability can be tweaked to circumvent application sandboxes, antivirus programs, HIPS, rootkit detectors, EMET, and SMEP. Witness a demonstration of bypassing every security software typically found on corporate user machines, highlighting the limitations of "defense in depth" strategies. Discuss the need for defensive methods immune to kernel-mode exploits and their potential implementations. Gain insights into the real-world implications of these vulnerabilities, including their use by modern malware like TDL4. Understand the ongoing challenges posed by frequent Windows kernel vulnerabilities and the importance of developing effective defense strategies against them.

Syllabus

Rafal Wojtczuk: LoL (Layers on Layers) - Bypassing Security for Fun and Profit V2

Taught by

Security BSides London

Reviews

Start your review of Layers on Layers - Bypassing Security for Fun and Profit V2

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.