Software Reversing Engineering (a.k.a. Reversing) Spiros Mancoridis. What is Reverse Engineering? Software Reverse Engineering: Reversing
|
|
|
- Liliana Casey
- 8 years ago
- Views:
Transcription
1 Software Reversing Engineering (a.k.a. Reversing) Spiros Mancoridis What is Reverse Engineering? Reverse engineering (RE) is the process of etracting the knowledge or design blueprints from anything man made. The difference between RE and scientific research is that with RE the artifact being investigated is man made. Goal of RE is to obtain missing knowledge, ideas,and design philosophy when such information is unavailable. Software Reverse Engineering: Reversing Reversing is about dissecting a program and eamining its internals. In most industries RE is used for developing competing products, but this is not the case for the software industry. RE of software is thought to be too comple to make sense financially. Common applications of RE in the software industry: Security Software development Distributed Objects 1
2 Security-related Reversing Malicious software Reversing cryptographic algorithms Digital Right Management (DMR) Auditing program binaries Security-related Reversing: Malicious Software (malware) Malicious software (e.g., viruses and worms) spread much faster now that computers are connected to the Internet. The infection process used to be slow (e.g., viruses spread by diskette sharing). Today s worms can spread automatically to computers without any human intervention. Developers of malware use RE to find vulnerabilities in OS and application software. Developers of ant-virus software use RE to develop tools to protect users from malware. Security-related Reversing: Reversing Crypto Algorithms Restricted algorithms, where the encryption is in the algorithm, (e.g.,caesar cipher) can be broken easily using RE. Key-based algorithms, where the algorithms are public but the key is secret, are more difficult to break. Vulnerabilities include obtaining the key (need luck) trying all possible combinations until you get the key (need quantum computer) Look for a flaw in the algorithm that eposes the key of the original message (need RE) Distributed Objects 2
3 Security-related Reversing: Digital Rights Management Media content providers have developed or use technologies (DRM) that control the distribution of digital content (e.g.,music, movies). DMR technologies determine if the content should be made available or not. Crackers use RE to attempt to defeat DRM technologies. RE can help to: reveal the secrets of DRM technology; discover simple modifications that can be made to DRM technologies to disable the protection they offer. Security-related Reversing: Auditing Program Binaries Open source software feels safer to run because it has been inspected and approved by thousands of impartial software engineers. RE is a viable (albeit limited) alternative for searching for security vulnerabilities when the source code of the program is not available. Software Development-Reversing Achieving Interoperability with proprietary software Developing competing software Evaluating software quality and robustness Distributed Objects 3
4 Software Development-Reversing: Achieving Interoperability with proprietary software Proprietary software libraries or OS APIs often have insufficient documentation. Solutions: Try to get things to work via brute force. Contact vendor for answers. Use RE to figure out how the code works. Software Development-Reversing: Developing competing software Even if the competitor has unpatented technology it is not cost-effective to RE the entire product. The eception may be highly comple or unique designs/algorithms that are very difficult or costly to develop. There are legal issues to consider when RE competing software. Software Development-Reversing: Evaluating software quality and robustness It is possible to audit software to get an estimate of the general quality of the coding practices used in the program. Microsoft announced that customers purchasing over 1,000 seats may obtain Windows source code for evaluation purposes. The rest have to either trust Microsoft or resort to RE. Access to source code is more desirable that binary reversing, however. Distributed Objects 4
5 System Software System software is a generic name for software infrastructure: Compilers Linkers Debuggers Operating systems Assembly languages An accomplished RE must develop an understanding of system software. RE tools (e.g., disassemblers, decompilers) just provide data, not the answers. System Software: Assembly Language Assembly language is a language that supports a specific computer platform. Machine code (a.k.a. binary code, object code) is a different representation of assembly language code. Machine code bits map directly to assembly language instructions and vice versa. Assembly programmers use assemblers. Reversers use disassemblers. Focus on the Intel IA-32 architecture, on which every 32-bit PC is based. System Software: Compilers and Interpreters Compilers translate high-level programming languages (e.g., C, C++) into machine code that can be eecuted by a computer s CPU. Some compilers (e.g., for Java and.net) generate bytecode instead of object code. Bytecode is interpreted by a program not the CPU. The greatest obstacle in deciphering compilergenerated code is the optimizations applied by most modern compilers. Optimized code is often unintuitive and difficult to read. E.g., loop unrolling, function in-lining. Distributed Objects 5
6 System Software: Operating Systems (OS) An OS is a program that manages the computer s hardware and software applications. A good reverser must understand what the OS does and how it does it. We will focus on the Microsoft Windows OS. The RE Process System-level reversing: Techniques that help determine the general structure of the program. Most of the information comes from the OS and, hence, OS monitoring utilities. Code-level reversing: Techniques provide detailed information on a selected code segment. Involves etracting design concepts and algorithms from from binary code. RE Tools System monitoring tools: Network activity, file access, register access. Disassemblers: Translate binary code to assembly language code. Debuggers: Reversers use debuggers in disassembly mode to set breakpoints and step through a program s eecution (with on-the-fly disassembly). Decompilers: Attempt to produce high-level code (e.g., C) from an eecutable binary file. A reverse compiler! Perfect decompilation impossible for most platforms. Distributed Objects 6
7 Is RE legal? What social and economic impact does RE have on society? Depends on what RE is used for Whether a RE scenario is legal or not depends on many factors. Legal Issues: Interoperability Eposing software interfaces facilitates the development of software that runs on top of the eposed platform. Good for increasing the sales of the platform. Bad if the competition offers a better product on the same platform. US court in legal case of Sega versus Accolade ruled in favor of Accolade. Accolade did not violate code copyright of Sega. Competition in the market benefited customers. Court essentially authorized RE for the purpose of interoperability. Legal Issues: Competition RE for interoperability has societal benefits, but when RE is used to develop competing products the situation is more complicated. Opponents of RE claim that reversing stifles innovation. Illegal (easy to prove): directly stealing code. Illegal (hard to prove):decompiling a program and recompiling it to generate a different binary with the same functionality. Legal: RE small parts of a product to gather information, not code. Then develop code independently. Distributed Objects 7
8 Legal Issues: Copyright Law A violation of copyright law is to directly copy protected code sequences from the competitor s product into you own product. Some have claimed that intermediate copies during RE decompilation violates copyright. These claims did not hold in court (e.g., Sega versus Accolade) because intermediate copies are created when a program is installed from a CD onto a hard disk. If the final product does not contain anything that was directly copied from the original product, copying is considered fair use. Legal Issues: Trade Secrets and Patents Patent: Owner controls the invention for up to 20 years. Details of the patent are publicly disclosed, hence RE of a patented technology does not make sense. Invention becomes public after patent epires. Patent protects owner from a competitor who independently invents the same technology. Trade secret: Granted automatically if product is kept a secret and significant effort was put into its development. Protects against rogue employee selling secrets to the competition. Does not protect product from RE. Legal Issues: The Digital Millennium Copyright Act (DMCA) DMCA legally protects copyright protection systems from circumvention. DMCA is considered anti-re legislation because such circumvention almost always involves reversing. DMCA only applies to copyright protection systems, so most RE applications are not affected by it. Two high-profile cases of DMCA violation: Felten versus RIAA (audio recordings protection) US versus Skylarov (Adobe ebook file format) Distributed Objects 8
9 Legal Issues: The Digital Millennium Copyright Act (DMCA) What is prohibited? 1. Circumvention of copyright protection systems. E.g., using a keygen program. 2. The development of circumvention technologies (DRM Digital Rights Management). E.g., developing a keygen program. A keygen program generates a serial number onthe-fly for programs that require a serial number during installation. Legal Issues: The Digital Millennium Copyright Act (DMCA) What is allowed? Interoperability Encryption research on encryption products Security testing Educational institutions and public libraries can violate DMCA in order to evaluate a copyrighted work prior to purchasing it. Government investigation Regulation Protection of privacy Legal Issues: License Agreement Considerations Other than DMCA, there are no laws that directly prohibit or restrict RE. DMCA only applies to DRM products. Vendors add anti-re clauses to software license agreements. In the US it is not clear that these clauses are enforceable. In the EU decompilation for the purposes of interoperability is permissible under the Directive of the Legal Protection of Computer Programs. Distributed Objects 9
10 A Survey of Tools used for the Reverse Engineering of Software Systems Topics 1. Basic background on assembly language 2. Types of reverse engineering tools and demonstrations of these tools: He editors: WinHe, Tsearch Decompilers: REC, DJ Disassemblers/Debuggers: IDAPro, OllyDbg, Win32Dasm, BORG 3. Types of reverse engineering prevention tools Code obfuscators: Y0da s Cryptor, NFO Program Abstractions Computers understand binary code Binary code can be written in headecimal Headecimal code can be encoded in assembly language Assembly language is human-readable but not as intuitive as source code Decompilers convert assembly into an easier-to-read source code == CD21 == int 21 Distributed Objects 10
11 Assembly language is an abstraction of headecimal code Reverse Engineering Tool Categories He Editors Decompilers Disassemblers/Debuggers Reverse Engineering Prevention Tools Code Obfuscators He Editors He editors read eecuting programs from RAM. Display their contents in headecimal code. Enable the editing of the running headecimal code. He editors WinHe Tsearch RAM editor Data recovery tools RAM Disassembler Distributed Objects 11
12 He Editors: WinHe Author: sf-soft Platform: Windows License: Shareware Website: He Editors: WinHe Features Display and edit (in headecimal) any program running in memory. Recover data that has been deleted (but not overwritten) from the hard-drive. He editors WinHe Tsearch RAM editor Data recovery tools RAM Disassembler He Editors: WinHe Distributed Objects 12
13 Reverse Engineering Tool Categories He Editors Decompilers Disassemblers/Debuggers Reverse Engineering Prevention Tools Code Obfuscators Decompilers Decompile a binary programs into readable source code. Replace all binary code that could not be decompiled with assembly code. Eecutable Decompiler Source Code Decompilers: REC Author: Backer Street Software Platform: Windows/Linu License: Freeware Website: Distributed Objects 13
14 Decompilers: REC Features Decompiles a program from binary code to C pseudo-code. Translates any binary it cannot decompile into assembly code. Typically generates about 60-70% of the program source code. Decompilers: REC Reverse Engineering Tool Categories He Editors Decompilers Disassemblers/Debuggers Reverse Engineering Prevention Tools Code Obfuscators Distributed Objects 14
15 Disassemblers/Debuggers Convert binary code into its assembly equivalent. Etract ASCII strings and used libraries. View memory, stack and CPU registers. Run the program (with breakpoints). Edit the assembly code at runtime. Disassemblers/Debuggers Programs & Features chart Product Dis- Assembly Processor options Debugger String etraction Disk He editor Memory He editor Memory Dumper Library's used Decryptor IDAPro OllyDbg W32Dasm BORG Disassemblers/Debuggers: OllyDbg Author: Oleh Yuschuk Platform: Windows License: Freeware Website: Distributed Objects 15
16 Disassemblers/Debuggers: OllyDbg Features Eecutes program in a controlled environment. Allows the flow of the program to be controlled. Uses a convenient layout showing headecimal, assembly, CPU registers and stack. Allows the program to be dumped from the memory onto the hard-disk. Highlights recently changed values in memory/stack/cpu registers. Disassemblers/Debuggers: OllyDbg Reverse Engineering Tool Categories He Editors Decompilers Disassemblers/Debuggers Reverse Engineering Prevention Tools Code Obfuscators Distributed Objects 16
17 Code Obfuscators Encrypts the code of a program so you cannot view it in assembly. Disallows the program to be run if it detects a known disassembler or debugger running. Obfuscators Obfuscation Antidebugging techniques GUI Y0da's Cryptor NFO Diagram of Code Obfuscators Eecutable INT 21 Code Obfuscator Eecutable (Encrypted) Code Obfuscators: Y0da s Cryptor Author: Y0da Platform: Windows License: Freeware Website: y0da.cjb.net Distributed Objects 17
18 Code Obfuscators: Y0da s Cryptor Features Encrypts the code of a program and inserts a decryption program in the main function of the code. (Obfuscation) Detects all major debuggers and disassemblers. (Anti-Debugging) Obfuscators Y0da's Cryptor Obfuscation Antidebugging techniques GUI NFO Code Obfuscators: Y0da s Cryptor Conclusions We are conducting an etensive survey of RE tools. Most of the tools we have surveyed fall into the categories of: He Editors Decompilers Code Obfuscators Disassemblers/Debuggers Distributed Objects 18
Qiong Liu, Reihaneh Safavi Naini and Nicholas Paul Sheppard Australasian Information Security Workshop 2003. Presented by An In seok. 2010.12.
Digital Rights Management for Content Distribution Qiong Liu, Reihaneh Safavi Naini and Nicholas Paul Sheppard Australasian Information Security Workshop 2003 Presented by An In seok. 2010.12.1 Contents
Lecture 12: Software protection techniques. Software piracy protection Protection against reverse engineering of software
Lecture topics Software piracy protection Protection against reverse engineering of software Software piracy Report by Business Software Alliance for 2001: Global economic impact of software piracy was
SECURE IMPLEMENTATIONS OF CONTENT PROTECTION (DRM) SCHEMES ON CONSUMER ELECTRONIC DEVICES
SECURE IMPLEMENTATIONS OF CONTENT PROTECTION (DRM) SCHEMES ON CONSUMER ELECTRONIC DEVICES Contents Introduction... 3 DRM Threat Model... 3 DRM Flow... 4 DRM Assets... 5 Threat Model... 5 Protection of
Parasitics: The Next Generation. Vitaly Zaytsev Abhishek Karnik Joshua Phillips
Parasitics: The Next Generation. Vitaly Zaytsev Abhishek Karnik Joshua Phillips Agenda Overview W32/Xpaj analysis Overview of a virtual machine Software protection trends W32/Winemmem analysis W32/Induc
SkyRecon Cryptographic Module (SCM)
SkyRecon Cryptographic Module (SCM) FIPS 140-2 Documentation: Security Policy Abstract This document specifies the security policy for the SkyRecon Cryptographic Module (SCM) as described in FIPS PUB 140-2.
A Survey of Reverse Engineering Tools for the 32-Bit Microsoft Windows Environment
A Survey of Reverse Engineering Tools for the 32-Bit Microsoft Windows Environment RAYMOND J. CANZANESE, JR., MATTHEW OYER, SPIROS MANCORIDIS, and MOSHE KAM College of Engineering Drexel University, Philadelphia,
Fine-grained covert debugging using hypervisors and analysis via visualization
Reverse Engineering by Crayon: Game Changing Hypervisor and Visualization Analysis Fine-grained covert debugging using hypervisors and analysis via visualization Daniel A. Quist Lorie M. Liebrock Offensive
Systems Software. Introduction to Information System Components. Chapter 1 Part 2 of 4 CA M S Mehta, FCA
Systems Software Introduction to Information System Components Chapter 1 Part 2 of 4 CA M S Mehta, FCA 1 Systems Software Learning Objects Task Statements 1.1 Identify deployment of different components
LASTLINE WHITEPAPER. In-Depth Analysis of Malware
LASTLINE WHITEPAPER In-Depth Analysis of Malware Abstract Malware analysis is the process of determining the purpose and functionality of a given malware sample (such as a virus, worm, or Trojan horse).
Introduction to Reverse Engineering
Introduction to Reverse Engineering Inbar Raz Malware Research Lab Manager December 2011 What is Reverse Engineering? Reverse engineering is the process of discovering the technological principles of a
10- Assume you open your credit card bill and see several large unauthorized charges unfortunately you may have been the victim of (identity theft)
1- A (firewall) is a computer program that permits a user on the internal network to access the internet but severely restricts transmissions from the outside 2- A (system failure) is the prolonged malfunction
Digital Rights Management. Introduction
Digital Rights Management 12/1/2010 Digital Rights Management 1 Introduction Digital Rights Management (DRM) is a term used for systems that restrict the use of digital media DRM defends against the illegal
Virtual Machines. Virtual Machines
Virtual Machines Virtual Machines What is a virtual machine? Examples? Benefits? 1 Virtualization Creation of an isomorphism that maps a virtual guest system to a real host: Maps guest state S to host
Software Reverse Engineering
Software Reverse Engineering Jacco Krijnen June 19, 2013 Abstract While reverse engineering probably started with the analysis of hardware, today it plays a significant role in the software world. We discuss
DIGITAL RIGHTS MANAGEMENT SYSTEM FOR MULTIMEDIA FILES
DIGITAL RIGHTS MANAGEMENT SYSTEM FOR MULTIMEDIA FILES Saiprasad Dhumal * Prof. K.K. Joshi Prof Sowmiya Raksha VJTI, Mumbai. VJTI, Mumbai VJTI, Mumbai. Abstract piracy of digital content is a one of the
Topics. Introduction. Java History CS 146. Introduction to Programming and Algorithms Module 1. Module Objectives
Introduction to Programming and Algorithms Module 1 CS 146 Sam Houston State University Dr. Tim McGuire Module Objectives To understand: the necessity of programming, differences between hardware and software,
Assessing the Security of Hardware-Based vs. Software-Based Encryption on USB Flash Drives
Assessing the Security of Hardware-Based vs. Software-Based Encryption on USB Flash Drives Main Line / Date / Etc. June May 2008 2nd Line 80-11-01583 xx-xx-xxxx Revision 1.0 Tagline Here Table of Contents
Building Applications Using Micro Focus COBOL
Building Applications Using Micro Focus COBOL Abstract If you look through the Micro Focus COBOL documentation, you will see many different executable file types referenced: int, gnt, exe, dll and others.
Content Teaching Academy at James Madison University
Content Teaching Academy at James Madison University 1 2 The Battle Field: Computers, LANs & Internetworks 3 Definitions Computer Security - generic name for the collection of tools designed to protect
Three short case studies
Three short case studies peer to peer networking wireless systems search engines each includes issues of hardware processors, storage, peripherals, networks,... representation of information, analog vs.
Introduction. Application Security. Reasons For Reverse Engineering. This lecture. Java Byte Code
Introduction Application Security Tom Chothia Computer Security, Lecture 16 Compiled code is really just data which can be edit and inspected. By examining low level code protections can be removed and
Sandy. The Malicious Exploit Analysis. http://exploit-analysis.com/ Static Analysis and Dynamic exploit analysis. Garage4Hackers
Sandy The Malicious Exploit Analysis. http://exploit-analysis.com/ Static Analysis and Dynamic exploit analysis About Me! I work as a Researcher for a Global Threat Research firm.! Spoke at the few security
Privilege Escalation via Client Management Software November 21, 2015 November 21, 2015 Matthias Deeg BSidesVienna 0x7DF 1 Who am I? Dipl.-Inf. Matthias Deeg Expert IT Security Consultant CISSP, CISA,
Outline. hardware components programming environments. installing Python executing Python code. decimal and binary notations running Sage
Outline 1 Computer Architecture hardware components programming environments 2 Getting Started with Python installing Python executing Python code 3 Number Systems decimal and binary notations running
PE Explorer. Heaventools. Malware Code Analysis Made Easy
Heaventools PE Explorer Data Sheet Malware Code Analysis Made Easy Reverse engineers within the anti-virus, vulnerability research and forensics companies face the challenge of analysing a large number
Attacking Obfuscated Code with IDA Pro. Chris Eagle
Attacking Obfuscated Code with IDA Pro Chris Eagle Outline Introduction Operation Demos Summary 2 First Order Of Business MOVE UP AND IN! There is plenty of room up front I can't increase the font size
Information Security Holger Schlingloff Jan 30th, 2002 1 Information security and copyright Why is there a connection? Remember definition from the very beginning: Similar to material objects, some informations
Custom Penetration Testing
Custom Penetration Testing Compromising a Vulnerability through Discovery and Custom Exploitation Stephen Sims Advanced Penetration Testing - 2009 SANS 1 Objectives Penetration Testing Precompiled Tools
Software: Systems and Application Software
Software: Systems and Application Software Computer Software Operating System Popular Operating Systems Language Translators Utility Programs Applications Programs Types of Application Software Personal
The programming language C. sws1 1
The programming language C sws1 1 The programming language C invented by Dennis Ritchie in early 1970s who used it to write the first Hello World program C was used to write UNIX Standardised as K&C (Kernighan
System Structures. Services Interface Structure
System Structures Services Interface Structure Operating system services (1) Operating system services (2) Functions that are helpful to the user User interface Command line interpreter Batch interface
(General purpose) Program security. What does it mean for a pgm to be secure? Depends whom you ask. Takes a long time to break its security controls.
(General purpose) Program security These ideas apply also to OS and DB. Read Chapter 3. What does it mean for a pgm to be secure? Depends whom you ask. Takes a long time to break its security controls.
Software License Management using the Polymorphic Encryption Algorithm White Paper
pmc-ciphers.com Software License Management using the Polymorphic Encryption Algorithm White Paper Published: May 2007, first published in January 2003 PMC Software License Management 1 Software License
Validating Tools for Cell Phone Forensics
Validating Tools for Cell Phone Forensics Neil Bhadsavle and Ju An Wang Southern Polytechnic State University 1100 South Marietta Parkway Marietta, GA 30060 (01) 678-915-3718 {nbhadsav, jwang}@spsu.edu
CS3600 SYSTEMS AND NETWORKS
CS3600 SYSTEMS AND NETWORKS NORTHEASTERN UNIVERSITY Lecture 2: Operating System Structures Prof. Alan Mislove (amislove@ccs.neu.edu) Operating System Services Operating systems provide an environment for
SAS Data Set Encryption Options
Technical Paper SAS Data Set Encryption Options SAS product interaction with encrypted data storage Table of Contents Introduction: What Is Encryption?... 1 Test Configuration... 1 Data... 1 Code... 2
CS 3530 Operating Systems. L02 OS Intro Part 1 Dr. Ken Hoganson
CS 3530 Operating Systems L02 OS Intro Part 1 Dr. Ken Hoganson Chapter 1 Basic Concepts of Operating Systems Computer Systems A computer system consists of two basic types of components: Hardware components,
Phire Architect Hardware and Software Requirements
Phire Architect Hardware and Software Requirements Copyright 2014, Phire. All rights reserved. The Programs (which include both the software and documentation) contain proprietary information; they are
Storing Encrypted Plain Text Files Using Google Android
Storing Encrypted Plain Text Files Using Google Android Abstract Jared Hatfield University of Louisville Google Android is an open source operating system that is available on a wide variety of smart phones
best practices for encryption in android
best practices for encryption in android SUBHEADER VALUE PROPOSTION STATEMENT GOES HERE developer.motorola.com/enterprise WHITE PAPER BEST PRACTICES FOR ENCRYPTION IN ANDROID 2 introduction Android has
Request for Comments on Section 1201(g) of the Digital Millennium Copyright Act COMMENTS OF THE COMPUTER & COMMUNICATIONS INDUSTRY ASSOCIATION (CCIA)
DEPARTMENT OF COMMERCE National Telecommunications and Information Administration LIBRARY OF CONGRESS Copyright Office [Docket No. 990428110-9110-01] RIN 0660-ZA09 Request for Comments on Section 1201(g)
Windows Server Performance Monitoring
Spot server problems before they are noticed The system s really slow today! How often have you heard that? Finding the solution isn t so easy. The obvious questions to ask are why is it running slowly
CSCA0101 Computing Basics CSCA0101 COMPUTING BASICS. Chapter 7 Software
CSCA0101 COMPUTING BASICS Chapter 7 1 1. Computer Application 2. Types of Computer 3. Licensing 4. Types of License 5. Piracy 2 Computer software, or just software, is a collection of computer programs
Adi Hayon Tomer Teller
Adi Hayon Tomer Teller Why are we here? (one of many reasons) A malicious program: Allocates memory in a remote process (and write to it) Executes the code in that memory region Frees the code Memory dump
Building A Secure Microsoft Exchange Continuity Appliance
Building A Secure Microsoft Exchange Continuity Appliance Teneros, Inc. 215 Castro Street, 3rd Floor Mountain View, California 94041-1203 USA p 650.641.7400 f 650.641.7401 ON AVAILABLE ACCESSIBLE Building
Securing Computing Resources from USB Borne Viruses and Malware. White Paper
Securing Computing Resources from USB Borne Viruses and Malware White Paper By Ray Dupont Director of Engineering Desktop Solutions ClearCube Technology The Nature of the Problem The USB dongle (also known
Messing with the Android Runtime
Northeastern University Systems Security Lab Messing with the Android Runtime Collin Mulliner, April 26th 2013, Singapore crm[at]ccs.neu.edu SyScan Singapore 2013 $ finger collin@mulliner.org 'postdoc'
4-06-55 Controlling Data Resources in Distributed Environments Barbara Grant
4-06-55 Controlling Data Resources in Distributed Environments Barbara Grant Payoff As the role of data in an organization expands and data becomes increasingly related to profitability, the impact of
CompTIA Mobile App Security+ Certification Exam (ios Edition) Live exam IOS-001 Beta Exam IO1-001
CompTIA Mobile App Security+ Certification Exam (ios Edition) Live exam IOS-001 Beta Exam IO1-001 INTRODUCTION This exam will certify that the successful candidate has the knowledge and skills required
Protecting Virtual Servers with Acronis True Image
Protecting Virtual Servers with Acronis True Image Protecting Virtual Servers with Acronis True Image In This Paper Protecting Virtual Servers with Acronis True Image...3 Virtual Machines: The Data Protection
Using WMI Scripts with BitDefender Client Security
Using WMI Scripts with BitDefender Client Security Whitepaper Copyright 2009 BitDefender; Table of Contents 1. Introduction... 3 2. Key Benefits... 4 3. Available WMI Script Templates... 5 4. Operation...
Counter Expertise Review on the TNO Security Analysis of the Dutch OV-Chipkaart. OV-Chipkaart Security Issues Tutorial for Non-Expert Readers
Counter Expertise Review on the TNO Security Analysis of the Dutch OV-Chipkaart OV-Chipkaart Security Issues Tutorial for Non-Expert Readers The current debate concerning the OV-Chipkaart security was
Copyright 2006. Sagicor Life Insurance Company. All rights reserved.
Terms & Conditions Welcome to Sagicor Life Insurance Company ( Sagicor ). Sagicor maintains this website for your personal information, education and communication. Your access to and use of this website
Section 1.4. Java s Magic: Bytecode, Java Virtual Machine, JIT,
J A V A T U T O R I A L S : Section 1.4. Java s Magic: Bytecode, Java Virtual Machine, JIT, JRE and JDK This section clearly explains the Java s revolutionary features in the programming world. Java basic
Operating System Structures
COP 4610: Introduction to Operating Systems (Spring 2015) Operating System Structures Zhi Wang Florida State University Content Operating system services User interface System calls System programs Operating
Instructor Özgür ZEYDAN BEU Dept. of Enve. Eng. http://cevre.beun.edu.tr/zeydan/ CIV 112 Computer Programming Lecture Notes (1)
Instructor Özgür ZEYDAN BEU Dept. of Enve. Eng. http://cevre.beun.edu.tr/zeydan/ CIV 112 Computer Programming Lecture Notes (1) Computer Programming A computer is a programmable machine. This means it
ETRAC Presentation ECCN 4E001.c intrusion software technology. Jim O Gorman, President October 15, 2015
ETRAC Presentation ECCN 4E001.c intrusion software technology Jim O Gorman, President October 15, 2015 Offensive Security - Projects Kali Linux (previously BackTrack Linux) Industry Standard Open source
SOFTWARE TECHNOLOGIES
SOFTWARE TECHNOLOGIES (September 2, 2015) BUS3500 - Abdou Illia, Fall 2015 1 LEARNING GOALS Identify the different types of systems software. Explain the main functions of operating systems. Know the various
Example of Standard API
16 Example of Standard API System Call Implementation Typically, a number associated with each system call System call interface maintains a table indexed according to these numbers The system call interface
1/20/2016 INTRODUCTION
INTRODUCTION 1 Programming languages have common concepts that are seen in all languages This course will discuss and illustrate these common concepts: Syntax Names Types Semantics Memory Management We
IQware's Approach to Software and IT security Issues
IQware's Approach to Software and IT security Issues The Need for Security Security is essential in business intelligence (BI) systems since they have access to critical and proprietary enterprise information.
Enhancing McAfee Endpoint Encryption * Software With Intel AES-NI Hardware- Based Acceleration
SOLUTION BLUEPRINT IT SECURITY MANAGEMENT Enhancing McAfee Endpoint Encryption * Software With Intel AES-NI Hardware- Based Acceleration Industry IT security management across industries Business Challenge
Patch management with WinReporter and RemoteExec
White Paper Patch management with WinReporter and RemoteExec This white paper provides an overview on how to use WinReporter and RemoteExec in conjunction to keep Windows systems updated and immune to
Lecture 26: Obfuscation
Lecture 26: Obfuscation 15411: Compiler Design Robbie Harwood and Maxime Serrano 21 November 2013 1 Introduction We have previously (lecture 20) considered the problem of doing compilation backwards (i.e.,
InsightCloud. www.insightcloud.com. Hosted Desktop Service. What is InsightCloud? What is SaaS? What are the benefits of SaaS?
What is InsightCloud? InsightCloud is a web portal enabling Insight customers to purchase and provision a wide range of Cloud services in a straightforward and convenient manner. What is SaaS? Software
Securing Host Operations with a Dedicated Cryptographic IC - CryptoCompanion
Securing Host Operations with a Dedicated Cryptographic IC - CryptoCompanion By Kerry Maletsky, Business Unit Director Crypto Products Summary There is a growing need for strong hardware security devices
C# and Other Languages
C# and Other Languages Rob Miles Department of Computer Science Why do we have lots of Programming Languages? Different developer audiences Different application areas/target platforms Graphics, AI, List
Loophole+ with Ethical Hacking and Penetration Testing
Loophole+ with Ethical Hacking and Penetration Testing Duration Lecture and Demonstration: 15 Hours Security Challenge: 01 Hours Introduction Security can't be guaranteed. As Clint Eastwood once said,
Computer Layers. Hardware BOOT. Operating System. Applications
Computers Software Computer Layers Hardware BOOT Operating System Applications Software Classifications System Software (operating system) Application Software Utility Software Malware Viruses and worms
Software Piracy Overview of Anti-Tampering Technologies. Scott Baeder Sr. Architect Cadence Design Systems baeder@cadence.
Software Piracy Overview of Anti-Tampering Technologies Scott Baeder Sr. Architect Cadence Design Systems baeder@cadence.com 0 Agenda Quick Review of Piracy Binary Hacking Crackers Workflow First Impressions
Common Pitfalls in Cryptography for Software Developers. OWASP AppSec Israel July 2006. The OWASP Foundation http://www.owasp.org/
Common Pitfalls in Cryptography for Software Developers OWASP AppSec Israel July 2006 Shay Zalalichin, CISSP AppSec Division Manager, Comsec Consulting shayz@comsecglobal.com Copyright 2006 - The OWASP
USB Portable Storage Device: Security Problem Definition Summary
USB Portable Storage Device: Security Problem Definition Summary Introduction The USB Portable Storage Device (hereafter referred to as the device or the TOE ) is a portable storage device that provides
Chapter 13: Program Development and Programming Languages
Understanding Computers Today and Tomorrow 12 th Edition Chapter 13: Program Development and Programming Languages Learning Objectives Understand the differences between structured programming, object-oriented
Chapter 3: Operating-System Structures. Common System Components
Chapter 3: Operating-System Structures System Components Operating System Services System Calls System Programs System Structure Virtual Machines System Design and Implementation System Generation 3.1
Automating Linux Malware Analysis Using Limon Sandbox Monnappa K A monnappa22@gmail.com
Automating Linux Malware Analysis Using Limon Sandbox Monnappa K A monnappa22@gmail.com A number of devices are running Linux due to its flexibility and open source nature. This has made Linux platform
The Hotspot Java Virtual Machine: Memory and Architecture
International Journal of Allied Practice, Research and Review Website: www.ijaprr.com (ISSN 2350-1294) The Hotspot Java Virtual Machine: Memory and Architecture Prof. Tejinder Singh Assistant Professor,
CHAPTER 5 HB 418-FN FINAL VERSION 2012 SESSION
Page 1 of 6 CHAPTER 5 HB 418-FN FINAL VERSION 15Mar2011 0733h 01/18/12 0009s 2012 SESSION 11-0741 05/10 HOUSE BILL 418-FN AN ACT relative to the use of open source software and open data formats by state
A White Paper from AccessData Group. Cerberus. Malware Triage and Analysis
A White Paper from AccessData Group Cerberus Malware Triage and Analysis What is Cerberus? Cerberus is the first-ever automated reverse engineering tool designed to show a security analyst precisely what
Operating System Overview. Otto J. Anshus
Operating System Overview Otto J. Anshus A Typical Computer CPU... CPU Memory Chipset I/O bus ROM Keyboard Network A Typical Computer System CPU. CPU Memory Application(s) Operating System ROM OS Apps
introducing COMPUTER ANTI FORENSIC TECHNIQUES
introducing COMPUTER ANTI FORENSIC TECHNIQUES COMPUTER FORENSIC DATA RECOVERY TECHNIQUES AND SOLUTIONS WORKSHOP Executive Summary Computer Forensics, a term that precisely identifies the discipline that
Standard: Web Application Development
Information Security Standards Web Application Development Standard IS-WAD Effective Date TBD Email security@sjsu.edu # Version 2.0 Contact Mike Cook Phone 408-924-1705 Standard: Web Application Development
Threat Model for Software Reconfigurable Communications Systems
Threat Model for Software Reconfigurable Communications Systems Presented to the Management Group 6 March 007 Bernard Eydt Booz Allen Hamilton Chair, SDR Security Working Group Overview Overview of the
Defending Behind The Device Mobile Application Risks
Defending Behind The Device Mobile Application Risks Tyler Shields Product Manager and Strategist Veracode, Inc Session ID: MBS-301 Session Classification: Advanced Agenda The What The Problem Mobile Ecosystem
Hotpatching and the Rise of Third-Party Patches
Hotpatching and the Rise of Third-Party Patches Alexander Sotirov asotirov@determina.com BlackHat USA 2006 Overview In the next one hour, we will cover: Third-party security patches _ recent developments
EMC DATA DOMAIN ENCRYPTION A Detailed Review
White Paper EMC DATA DOMAIN ENCRYPTION A Detailed Review Abstract The proliferation of publicized data loss, coupled with new governance and compliance regulations, is driving the need for customers to
How do Users and Processes interact with the Operating System? Services for Processes. OS Structure with Services. Services for the OS Itself
How do Users and Processes interact with the Operating System? Users interact indirectly through a collection of system programs that make up the operating system interface. The interface could be: A GUI,
SecureDoc Disk Encryption Cryptographic Engine
SecureDoc Disk Encryption Cryptographic Engine FIPS 140-2 Non-Proprietary Security Policy Abstract: This document specifies Security Policy enforced by SecureDoc Cryptographic Engine compliant with the
Appendix M INFORMATION TECHNOLOGY (IT) YOUTH APPRENTICESHIP
Appendix M INFORMATION TECHNOLOGY (IT) YOUTH APPRENTICESHIP PROGRAMMING & SOFTWARE DEVELOPMENT AND INFORMATION SUPPORT & SERVICES PATHWAY SOFTWARE UNIT UNIT 5 Programming & and Support & s: (Unit 5) PAGE
Patterns for Secure Boot and Secure Storage in Computer Systems
Patterns for Secure Boot and Secure Storage in Computer Systems Hans Löhr, Ahmad-Reza Sadeghi, Marcel Winandy Horst Görtz Institute for IT Security, Ruhr-University Bochum, Germany {hans.loehr,ahmad.sadeghi,marcel.winandy}@trust.rub.de
Obfuscation: know your enemy
Obfuscation: know your enemy Ninon EYROLLES neyrolles@quarkslab.com Serge GUELTON sguelton@quarkslab.com Prelude Prelude Plan 1 Introduction What is obfuscation? 2 Control flow obfuscation 3 Data flow
Data Security Incident Response Plan. [Insert Organization Name]
![Data Security Incident Response Plan. [Insert Organization Name]](/thumbs/34/17160420.jpg "Data Security Incident Response Plan. [Insert Organization Name]")
Data Security Incident Response Plan Dated: [Month] & [Year] [Insert Organization Name] 1 Introduction Purpose This data security incident response plan provides the framework to respond to a security
ASSEMBLY PROGRAMMING ON A VIRTUAL COMPUTER
ASSEMBLY PROGRAMMING ON A VIRTUAL COMPUTER Pierre A. von Kaenel Mathematics and Computer Science Department Skidmore College Saratoga Springs, NY 12866 (518) 580-5292 pvonk@skidmore.edu ABSTRACT This paper
Objectives. Chapter 2: Operating-System Structures. Operating System Services (Cont.) Operating System Services. Operating System Services (Cont.
Objectives To describe the services an operating system provides to users, processes, and other systems To discuss the various ways of structuring an operating system Chapter 2: Operating-System Structures
Effective Java Programming. efficient software development
Effective Java Programming efficient software development Structure efficient software development what is efficiency? development process profiling during development what determines the performance of
Introduction to programming
Unit 1 Introduction to programming Summary Architecture of a computer Programming languages Program = objects + operations First Java program Writing, compiling, and executing a program Program errors
Smart Card APDU Analysis
Smart Card APDU Analysis Black Hat Briefings 2008 Las Vegas Ivan "e1" Buetler ivan.buetler@csnc.ch Compass Security AG - Switzerland Compass Security AG Glärnischstrasse 7 Postfach 1628 CH-8640 Rapperswil
Plain English Guide To Common Criteria Requirements In The. Field Device Protection Profile Version 0.75
Plain English Guide To Common Criteria Requirements In The Field Device Protection Profile Version 0.75 Prepared For: Process Control Security Requirements Forum (PCSRF) Prepared By: Digital Bond, Inc.
Understanding Virus Behavior in 32-bit Operating Environments
Understanding Virus Behavior in 32-bit Operating Environments Executive Summary Computer Viruses and How They Spread Types of Viruses How Viruses Spread Virus Damage Viruses in a Windows 95 Environment
Embedded Software Development
Linköpings Tekniska Högskola Institutionen för Datavetanskap (IDA), Software and Systems (SaS) TDDI11, Embedded Software 2010-04-22 Embedded Software Development Host and Target Machine Typical embedded
FORBIDDEN - Ethical Hacking Workshop Duration
Workshop Course Module FORBIDDEN - Ethical Hacking Workshop Duration Lecture and Demonstration : 15 Hours Security Challenge : 01 Hours Introduction Security can't be guaranteed. As Clint Eastwood once