search

CyberSecurityClubMoscow / meetups

7 stars 0 forks source link

[MEETUP] Randomisation in Cyber Security #3

Closed mitilan closed 4 years ago

mitilan commented 4 years ago

Что может быть рандомизировано? Примеры. Насколько целесообразно рандомизировать различные аспекты IT систем.

mitilan commented 4 years ago

TCP Sequence Number Attack https://www.youtube.com/watch?v=fXIYG_m-d0w

https://en.m.wikipedia.org/wiki/TCP_sequence_prediction_attack

mitilan commented 4 years ago

On the Effectiveness of Address-Space Randomization ASLR can be easily brute forced https://web.stanford.edu/~blp/papers/asrandom.pdf

mitilan commented 4 years ago

Nice explanation of PID randomisation practice https://security.stackexchange.com/questions/88692/do-randomized-pids-bring-more-security

mitilan commented 4 years ago

"If something can be random, make it random" http://www.openbsd.org/papers/dev-sw-hostile-env.html

mitilan commented 4 years ago

Private Wi-Fi addresses in iOS 14, iPadOS 14, and watchOS 7 https://support.apple.com/en-us/HT211227

mitilan commented 4 years ago

Announcement of KARL - Kernel Address Randomized Link https://undeadly.org/cgi?action=article&sid=20170701170044

mitilan commented 4 years ago

Про ASLR по-русски https://ru.bmstu.wiki/ASLR_(Address_Space_Layout_Randomization)