advanced x86: bios and system management mode internals chipset architecture xeno kovah && corey...

Download Advanced x86: BIOS and System Management Mode Internals Chipset Architecture Xeno Kovah && Corey Kallenberg LegbaCore, LLC

If you can't read please download the document

Upload: brett-evans

Post on 18-Jan-2016

240 views

Category:

Documents

10 download

Report

Download

Embed Size (px):

Eair 2014 harboe&kallenberg

Advanced x86: BIOS and System Management Mode Internals Introduction Xeno Kovah && Corey Kallenberg LegbaCore, LLC

PE continued Xeno Kovah – 2012 xkovah at gmail 1 B INARIES ! PART 2 See notes for citation

Advanced x86: BIOS and System Management Mode Internals PCI {Option/Expansion} ROMs Xeno Kovah && Corey Kallenberg LegbaCore, LLC

Xeno Kovah – 2012 xkovah at gmail 1 76079.The_Life_of_Insects BINARIES

Advanced x86: BIOS and System Management Mode Internals Reset Vector Xeno Kovah && Corey Kallenberg LegbaCore, LLC

Malware Dynamic Analysis Part 4 Veronica Kovah vkovah.ost at gmail See notes for citation1

Advanced x86: BIOS and System Management Mode Internals Unified Extensible Firmware Interface (UEFI) Xeno Kovah && Corey Kallenberg LegbaCore, LLC

Malware Dynamic Analysis Part 2 Veronica Kovah vkovah.ost at gmail See notes for citation1

Advanced x86: BIOS and System Management Mode Internals UEFI SecureBoot Xeno Kovah && Corey Kallenberg LegbaCore, LLC

Advanced x86: BIOS and System Management Mode Internals SPI Flash Xeno Kovah && Corey Kallenberg LegbaCore, LLC

Intermediate Intel x86: Assembly, Architecture, Applications, and Alliteration Xeno Kovah – 2010 xkovah at gmail

© 2013 The MITRE Corporation. All rights reserved. For internal MITRE use Corey Kallenberg John Butterworth Sam Cornwell Xeno Kovah Defeating Signed BIOS

Advanced x86: BIOS and System Management Mode Internals SPI Flash Programming Xeno Kovah && Corey Kallenberg LegbaCore, LLC

Malware Dynamic Analysis Part 1 Veronica Kovah vkovah.ost at gmail See notes for citation1

© 2014 The MITRE Corporation. All rights reserved. Xeno Kovah John Butterworth Corey Kallenberg Sam Cornwell Copernicus 2: SENTER the Dragon!

Are you giving firmware attackers a free pass?legbacore.com/Research_files/HTA-F02_Kovah_v5.pdf · 2015. 11. 4. · #RSAC SESSION ID: Xeno Kovah Corey Kallenberg Are you giving firmware

Advanced x86: BIOS and System Management Mode Internals UEFI Reverse Engineering Xeno Kovah && Corey Kallenberg LegbaCore, LLC

How Many Million BIOSes Would you Like to Infect? Corey Kallenberg & Xeno Kovah

Advanced x86: BIOS and System Management Mode Internals SMM & Caching Xeno Kovah && Corey Kallenberg LegbaCore, LLC

Training Security Nerds: Computum deos ab hominibus Xeno Kovah

Advanced x86: BIOS and System Management Mode Internals Motivation Xeno Kovah && Corey Kallenberg LegbaCore, LLC

A-ROliva-Kallenberg-Managing the Transition From Products to Services

Advanced x86: BIOS and System Management Mode Internals Tools Xeno Kovah && Corey Kallenberg LegbaCore, LLC

Advanced x86: BIOS and System Management Mode Internals System Management Mode (SMM) Xeno Kovah && Corey Kallenberg LegbaCore, LLC

Advanced x86: BIOS and System Management Mode Internals More Fun with SMM Xeno Kovah && Corey Kallenberg LegbaCore, LLC

Advanced x86: BIOS and System Management Mode Internals Input/Output Xeno Kovah && Corey Kallenberg LegbaCore, LLC

Advanced x86: BIOS and System Management Mode Internals Flash Descriptor Xeno Kovah && Corey Kallenberg LegbaCore, LLC

2013 The MITRE Corporation. All rights reserved.. Approved for public release 13-2534 John Butterworth Corey Kallenberg Xeno Kovah BIOS Chronomancy:

Rootkits: What they are and how to find them Part 3 Xeno Kovah – 2010 xkovah at gmail

Malware Dynamic Analysis Part 6 Veronica Kovah vkovah.ost at gmail See notes for citation1

Intermediate x86 Part 3 Xeno Kovah – 2010 xkovah at gmail

Eair 2015 Kallenberg - Interacting Spheres Revisited

Advanced x86: BIOS and System Management Mode Internals PCI Xeno Kovah && Corey Kallenberg LegbaCore, LLC

© 2013 The MITRE Corporation. All rights reserved. For internal MITRE use John Butterworth Corey Kallenberg Xeno Kovah BIOS Chronomancy: Fixing the Core