We're sorry but this page doesn't work properly without JavaScript enabled. Please enable it to continue.
Feedback

What could possibly go wrong with <insert x86 instruction here>?

00:00

Formal Metadata

Title
What could possibly go wrong with <insert x86 instruction here>?
Subtitle
Side effects include side-channel attacks and bypassing kernel ASLR
Title of Series
Number of Parts
147
Author
License
CC Attribution 4.0 International:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor.
Identifiers
Publisher
Release Date
Language

Content Metadata

Subject Area
Genre
Abstract
Hardware is often considered as an abstract layer that behaves correctly, just executing instructions and outputting a result. However, the internal state of the hardware leaks information about the programs that are executing. In this talk, we focus on how to extract information from the execution of simple x86 instructions that do not require any privileges. Beyond classical cache-based side-channel attacks, we demonstrate how to perform cache attacks without a single memory access, as well as how to bypass kernel ASLR. This talk does not require any knowledge about assembly. We promise.
Keywords
Inclusion mapSound effectProxy serverKernel (computing)Computer programmingExploit (computer security)Insertion lossLipschitz-StetigkeitProgrammer (hardware)Computer animationLecture/Conference
ComputerSoftwareComputer hardwareLeakInformationCache (computing)Kernel (computing)Read-only memoryArmTranslation (relic)TrailComputer scienceUniverse (mathematics)WordInsertion lossSoftwareProxy serverMultiplication signTwitterArmStudent's t-testLipschitz-StetigkeitPoint (geometry)Line (geometry)BitKernel (computing)Cache (computing)InformationComputer hardwareSemiconductor memoryFerry CorstenVotingLecture/ConferenceXML
Cache (computing)Read-only memoryTranslation (relic)TrailBefehlsprozessorIntelCore dumpComputer multitaskingSemiconductor memoryOpen sourceCache (computing)Translation (relic)Kernel (computing)Proxy serverTrailLevel (video gaming)Different (Kate Ryan album)Category of beingSystem callProgram slicingPoint (geometry)BitSpacetimeRule of inferenceTerm (mathematics)EstimatorCore dumpBefehlsprozessorPointer (computer programming)Lecture/ConferenceComputer animation
Cache (computing)Address spacePrice indexHauptspeicherOpcodeInformation managementExtension (kinesiology)Asynchronous Transfer ModeException handlingCodeEquals signCanonical ensembleRead-only memoryLimit (category theory)Web pageStructural loadLevel (video gaming)Cache (computing)Line (geometry)BitSubject indexingComputer programmingSet (mathematics)AdditionSlide ruleSound effectAddress spaceExpert systemCodeException handlingSemiconductor memoryFlow separationData structureView (database)Constructor (object-oriented programming)Point (geometry)Lecture/ConferenceJSONXML
MiniDiscData storage deviceCache (computing)BefehlsprozessorLevel (video gaming)Different (Kate Ryan album)HauptspeicherSemiconductor memoryHierarchyBefehlsprozessorSound effectMultiplication signMeasurementCycle (graph theory)Ferry CorstenAddress spaceBitCache (computing)Semiconductor memoryMiniDiscLevel (video gaming)Category of beingProgram slicingCartesian coordinate systemPlotterTime zoneLecture/ConferenceComputer animationDiagram
Read-only memoryCache (computing)Line (geometry)Content (media)Process (computing)Key (cryptography)CryptographySpacetimeAddress spaceLibrary (computing)Structural loadSemiconductor memoryCache (computing)Line (geometry)Category of beingTime zoneAddress spaceRectangleMeasurementShared memoryFlash memory2 (number)Multiplication signProcess (computing)Content (media)Type theoryPhysical systemRight angleSide channel attackCartesian coordinate systemKey (cryptography)MappingDifferent (Kate Ryan album)State of matterOcean currentAdditionDecision theoryLecture/ConferenceMeeting/InterviewDiagram
Structural loadSpacetimeAddress spaceCache (computing)Read-only memoryLine (geometry)Information privacyComputer-generated imageryGUI widgetInternetworkingAddress spaceMappingLine (geometry)Cache (computing)Structural loadMedical imagingInternetworkingOperating systemScheduling (computing)State of matterSet (mathematics)Multiplication signMobile appSystem callTask (computing)AdditionMechanism designCartesian coordinate systemCovering spaceInformationGUI widgetOperator (mathematics)Lecture/ConferenceMeeting/InterviewComputer animation
Information privacyGUI widgetComputer-generated imageryInternetworkingCache (computing)Line (geometry)InternetworkingMedical imagingComputer-assisted translationPoint (geometry)Series (mathematics)Multiplication signAddress spaceFlash memory1 (number)TransmitterLine (geometry)Cache (computing)Lecture/ConferenceMeeting/InterviewJSONXML
Server (computing)Cache (computing)Covering spaceLevel (video gaming)Client (computing)Point cloudShared memoryCovering spaceArithmetic progressionSemiconductor memoryCloud computingVirtual machineCartesian coordinate systemLine (geometry)Cache (computing)Physical systemSound effectWeißes RauschenData conversionLecture/ConferenceMeeting/InterviewComputer animation
Covering spaceCache (computing)Client (computing)Server (computing)Level (video gaming)CryptographyMereologyFreewareData transmissionFehlererkennungCovering spaceError messageNoise (electronics)Virtual machineMultiplication signGroup actionSystem callConnected space1 (number)Cartesian coordinate systemReal numberServer (computing)CryptographyWeb 2.0State of matterComputer fileTask (computing)Semiconductor memoryCache (computing)Message passingData conversionLecture/ConferenceComputer animation
Advanced Encryption StandardImplementationSoftwareTable (information)Price indexCryptographyAddress spaceTable (information)Source codeImplementationRoundness (object)Sheaf (mathematics)ComputerComputerKey (cryptography)Cache (computing)Price indexAddress spaceAlgorithmCellular automatonRight anglePlanningArithmetic meanPattern languageDiagonalState of matterRule of inferenceTwitterNetwork topologyLecture/ConferenceComputer animation
ImplementationDefault (computer science)Table (information)Android (robot)CryptographyImplementationAndroid (robot)Cartesian coordinate systemDefault (computer science)Table (information)Line (geometry)Cache (computing)Demo (music)Lecture/ConferenceComputer animation
Demo (music)Local ringAlphabet (computer science)SpacetimeLinker (computing)Range (statistics)Thresholding (image processing)Physical systemComputer virusSmartphoneTouchscreenRight angleKeyboard shortcutKey (cryptography)WordGastropod shellMobile appData storage deviceCache (computing)SpacetimeFood energyVotingXMLComputer animation
Mobile WebClique-widthDemo (music)Computer wormAddress spaceCore dumpMereologyPersonal digital assistantNumberDisk read-and-write headBitLevel (video gaming)Line (geometry)Address spaceCache (computing)Cycle (graph theory)Different (Kate Ryan album)MereologyMultiplication signCategory of beingInclusion mapBefehlsprozessorBridging (networking)Macro (computer science)Graph coloringPoint (geometry)Solid geometryMeasurementComputer architectureState of matterSinc functionPrisoner's dilemmaData structureCovering spaceSound effectComputer animationLecture/Conference
Address spaceSpacetimeCache (computing)Read-only memoryLibrary (computing)Structural loadBefehlsprozessorCache (computing)Side channel attackCovering spaceSemiconductor memoryBitTime zoneLine (geometry)Library (computing)Antivirus softwareDirected graphLecture/ConferenceDiagram
Cache (computing)BefehlsprozessorRead-only memoryPressureProgrammschleifeEvent horizonChannel capacityCache (computing)Computer programmingSemiconductor memory2 (number)Standard deviationCovering spaceLine (geometry)CodeTLB <Informatik>ProgrammschleifeEvent horizonCommunications protocolPosition operatorPrime idealChannel capacityPhysicalismStructural loadFraction (mathematics)Revision controlSound effectLecture/ConferenceComputer animation
Channel capacityPrime idealNumberAdvanced Encryption StandardPairwise comparisonProcess (computing)Cache (computing)Multiplication signBitReal numberEncryptionSide channel attackVideo gameCovering spaceTable (information)2 (number)Level (video gaming)Closed setNumberImplementationDifferent (Kate Ryan album)Noise (electronics)Archaeological field surveyCellular automatonWebsiteDigital photographyGame theoryStylus (computing)Point (geometry)Event horizonComputerSound effectBeat (acoustics)Lecture/ConferenceComputer animation
Address spaceComputer multitaskingCache (computing)Hash functionFunction (mathematics)Cache (computing)Level (video gaming)Address spaceCorrespondence (mathematics)BitType theoryProgram slicingHash functionDifferent (Kate Ryan album)Information securitySet (mathematics)PhysicalismCore dumpMappingLine (geometry)Function (mathematics)Virtual machineTrailFunctional (mathematics)NumberSpacetimeBeat (acoustics)Lecture/ConferenceComputer animation
Computer multitaskingCore dumpMereologyAddress spaceFunction (mathematics)Line (geometry)Computer programmingProgram slicingTheory of relativityReverse engineeringCore dumpSystem callBitAddress spaceFunctional (mathematics)Lecture/ConferenceComputer animationDiagram
Read-only memoryBefehlsprozessorTemporal logicVector spaceInformation managementIntelCache (computing)Constructor (object-oriented programming)SpeicheradresseStreaming mediaStructural loadIntelContext awarenessCartesian coordinate systemCache (computing)SoftwareDifferent (Kate Ryan album)Level (video gaming)Address spacePhysical systemLecture/ConferenceMeeting/InterviewComputer animation
Web pageCache (computing)Read-only memorySoftwareAddress spaceContext awarenessIntelPointer (computer programming)MalwareSeitentabelleRadio-frequency identificationPartial differential equationTranslation (relic)Directory servicePiConnectionismDuality (mathematics)Probability density functionAddress spaceWeb pageLaceDeterminismLine (geometry)Table (information)Pointer (computer programming)Level (video gaming)Operating systemBefehlsprozessorDirectory serviceInformationSeitentabelleData structureComputer programmingCartesian coordinate systemBitVirtualizationPoint (geometry)Sound effectLecture/ConferenceDiagramProgram flowchart
Translation (relic)Address spaceCache (computing)Partial differential equationCore dumpRead-only memoryPhysical systemDynamic random-access memoryData structureWeb pageContext awarenessKernel (computing)Process (computing)System programmingSpacetimeDevice driverBootingRandomizationMultiplication signAddress spacePhysicalismCache (computing)Level (video gaming)Semiconductor memoryTranslation (relic)VirtualizationKernel (computing)Computer programmingAdditionComputer fileFunctional (mathematics)MeasurementDynamic random-access memoryDevice driverRandomizationCodeLecture/ConferenceComputer animation
Kernel (computing)SpektralmaßAddress spaceVirtual realitySpacetimeRead-only memoryBefehlsprozessorKernel (computing)Address spaceMeasurementComputer programmingDiscounts and allowancesVirtual machineSpacetimeWindowHypercubeObject (grammar)Level (video gaming)Complete metric spaceWeb pageCone penetration testPhysical systemTwin primeModal logicMultiplication signSemiconductor memoryAdditionDirection (geometry)Crash (computing)BefehlsprozessorLecture/ConferenceMeeting/InterviewComputer animationDiagram
Address spaceVirtual realityCategory of beingCache (computing)Directed setKernel (computing)OracleTranslation (relic)SpacetimeRead-only memoryTexture mappingAddress spaceMultiplication signPhysicalismTwin primeRow (database)Position operatorStructural loadDifferenz <Mathematik>Run time (program lifecycle phase)Translation (relic)Cache (computing)BefehlsprozessorInformationTable (information)Functional (mathematics)Direction (geometry)Kernel (computing)OracleMatching (graph theory)Level (video gaming)SpacetimeWeb pageStability theoryLattice (order)AliasingSemiconductor memoryDependent and independent variablesData structureVirtualizationState of matterPlotterMeeting/InterviewComputer animation
Address spaceOracleTranslation (relic)Web pageCategory of beingTexture mappingPlotterAddress spacePhysicalismVirtualizationDifferent (Kate Ryan album)Point (geometry)Correspondence (mathematics)Computer fileWeb pageLevel (video gaming)Time zoneSpacetimeMultiplication signTranslation (relic)BuildingCategory of beingCache (computing)Process (computing)AdditionInstance (computer science)InformationBus (computing)Flash memoryTheory of everythingLecture/ConferenceComputer animation
OracleAddress spaceLevel (video gaming)Translation (relic)Process (computing)Virtual realityExploit (computer security)Device driverKernel (computing)Proxy serverWeb pageRead-only memoryData bufferAverageProxy serverLevel (video gaming)Address spaceRandomizationAdditionComputer fileExploit (computer security)Web pageScheduling (computing)Uniform resource locatorSystem callOracleComputer programmingTranslation (relic)Multiplication signCache (computing)Device driverData bufferCodeAveragePoint (geometry)MeasurementThread (computing)2 (number)WindowThomas BayesSemiconductor memoryLecture/ConferenceComputer animation
Random numberComputer hardwareOperations researchAddress spaceSpacetimePredictionKey (cryptography)Hydraulic jumpKernel (computing)Database transactionExtension (kinesiology)Read-only memoryBefehlsprozessorArchitectureComputer hardwareRandomizationBitRandom number generationMultiplication signNumberOperator (mathematics)Branch (computer science)Covering spacePredictabilityCASE <Informatik>Proxy serverType theoryMathematical optimizationSpeichermodellCryptographySemiconductor memoryDatabase transactionKernel (computing)Extension (kinesiology)Computer architectureDifferent (Kate Ryan album)Information securityPoint (geometry)NP-hardProduct (business)FamilyGroup actionLecture/ConferenceMeeting/InterviewXMLComputer animation
ArchitectureBefehlsprozessorInformationInformationPropositional formulaCache (computing)Lecture/ConferenceXMLComputer animation
Moment <Mathematik>BackupDegree (graph theory)Process (computing)Identical particlesComputer programmingMetric systemBitLecture/ConferenceComputer animation
TLB <Informatik>Cartesian coordinate systemThresholding (image processing)Event horizonCache (computing)Metric systemBitLattice (order)2 (number)PlanningIntelLecture/ConferenceMeeting/InterviewComputer animation
Goodness of fitSurfaceSound effectDemonCache (computing)Line (geometry)MeasurementFile viewerAlphabet (computer science)WebsiteType theoryImplementationFlow separationComputer hardwareKey (cryptography)Shared memoryPlanningComa BerenicesSemiconductor memoryTable (information)Software testingMultiplication signDifferent (Kate Ryan album)Physical systemProcedural programmingInformationNoise (electronics)Content (media)Process (computing)Heat transferKeyboard shortcutUniform resource locatorTime zoneFunctional (mathematics)Medical imagingRandomizationVulnerability (computing)Point (geometry)SpacetimePrime idealData managementRandom number generationPseudozufallszahlenSide channel attackAndroid (robot)CodeCryptographyArmIntelCovering spaceFigurate numberVorwärtsfehlerkorrekturSynchronizationLecture/ConferenceMeeting/Interview
Scheduling (computing)Roundness (object)Advanced Encryption StandardSide channel attackWebsiteLecture/ConferenceMeeting/Interview
MedianCartesian closed categoryData storage deviceJSON
Transcript: English(auto-generated)