{"id":1519,"date":"2016-11-23T01:07:52","date_gmt":"2016-11-23T01:07:52","guid":{"rendered":"https:\/\/www.inforsec.org\/wp\/?p=1519"},"modified":"2016-11-23T01:07:52","modified_gmt":"2016-11-23T01:07:52","slug":"%e5%b8%a6%e4%bd%a0%e8%b5%b0%e8%bf%9b%e7%bb%b4%e4%b9%9f%e7%ba%b3%e7%89%88%e7%9a%84ccs2016%ef%bc%88%e7%8e%b0%e5%9c%ba%e6%8a%a5%e5%91%8a%e7%82%b9%e8%af%84%e4%ba%94%ef%bc%89","status":"publish","type":"post","link":"http:\/\/202.112.238.40\/wp\/?p=1519","title":{"rendered":"\u5e26\u4f60\u8d70\u8fdb\u7ef4\u4e5f\u7eb3\u7248\u7684CCS2016\uff08\u73b0\u573a\u62a5\u544a\u70b9\u8bc4\u4e94\uff09"},"content":{"rendered":"<h4 style=\"text-align: right;\">\u6587\/\u5b59\u8317\u73c5 \u9999\u6e2f\u4e2d\u6587\u5927\u5b66<\/h4>\n<h4><strong><b>UniSan: Proactive Kernel Memory Initialization to Eliminate Data Leakages<\/b><\/strong><\/h4>\n<p>Kangjie Lu, Chengyu Song, Taesoo Kim and Wenke Lee (Georgia Institute of Technology)<\/p>\n<p><!--more--><\/p>\n<p>UniSan \u662f\u4e00\u4e2a\u68c0\u6d4b Linux kernel \u7684 memory initialization \u95ee\u9898\u7684\u3002 Memory initialization \u4f1a\u6709\u4ec0\u4e48\u95ee\u9898\uff1f\u6211\u4eec\u770b\u4e0b\u9762\u8fd9\u4e2a\u4f8b\u5b50\uff1a<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1520\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724712-2.png\" alt=\"%e5%9b%be%e7%89%8712\" width=\"600\" height=\"416\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724712-2.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724712-2-300x208.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724712-2-216x150.png 216w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724712-2-150x104.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>unisan-2<\/i><\/em><\/p>\n<p>\u4e0a\u56fe\u7684 kernel structure \u4e2d\u5305\u62ec\u4e00\u4e2a unsigned int \u548c\u4e00\u4e2a unsigned char\uff0c\u4e3a\u4e86 memory alignment\uff0c\u7f16\u8bd1\u5668\u4f1a\u5728\u540e\u9762\u52a0\u5165 3-byte padding\u3002\u95ee\u9898\u5c31\u5728\u4e8e\uff0c\u8fd9 3 bytes \u5e76\u6ca1\u6709 initialize\uff0c\u53ef\u80fd\u8fd8\u4fdd\u7559\u4e86\u4e0a\u6b21\u7684\u6570\u636e\uff0c\u5f53\u628a\u8fd9\u6bb5\u5185\u5b58\u8fd4\u56de\u7ed9\u7528\u6237\u7a7a\u95f4\u7684\u65f6\u5019\uff0c\u56e0\u800c\u9020\u6210\u4e86 kernel memory \u7684 data leakage.<\/p>\n<p>C11 \u7684 spec \u4e0a\u5374\u662f\u4e5f\u8bf4\u660e\u4e86\u5e94\u8be5\u662f unspecified values\uff0c\u6240\u4ee5\u4e5f\u4e0d\u662f\u7f16\u8bd1\u5668\u7684\u9519\u4e86\u3002<img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1521\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724713-1.png\" alt=\"%e5%9b%be%e7%89%8713\" width=\"600\" height=\"390\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724713-1.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724713-1-300x195.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724713-1-231x150.png 231w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724713-1-150x98.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>unisan-3<\/i><\/em><\/p>\n<p>\u4f5c\u8005\u628a\u53d1\u73b0\u7684\u95ee\u9898\u62a5\u7ed9 Kernel community \u5f97\u5230\u7684\u53cd\u9988\u975e\u5e38\u6709\u610f\u601d\uff0c\u6709\u6000\u7591\u7684\uff0c\u6709\u786e\u8ba4\u7684\uff0c\u8fd8\u6709\u6028 GCC \u7684\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1522\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724715-1.png\" alt=\"%e5%9b%be%e7%89%8715\" width=\"600\" height=\"394\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724715-1.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724715-1-300x197.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724715-1-228x150.png 228w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724715-1-150x99.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>unisan-4<\/i><\/em><\/p>\n<p>\u5728\u8fd9\u7bc7\u6587\u7ae0\uff0c\u4f5c\u8005\u4e3a\u4e86\u627e\u5230\u8fd9\u7c7b\u7684 initialization \u5f15\u8d77\u7684 data leakage\uff0c\u63d0\u51fa\u4e86\u7528 program analysis \u7684\u65b9\u6cd5\u68c0\u67e5\u7a0b\u5e8f\u662f\u5426\u521d\u59cb\u5316\u5185\u5b58\u5bf9\u8c61\u3002\u5177\u4f53\u662f\u57fa\u4e8e LLVM \u68c0\u67e5 \uff08\u6ca1\u6709\u9009\u62e9 GCC \u7684\u539f\u56e0\u662f LLVM \u63d0\u4f9b\u4e86\u66f4\u591a\u7684 API\uff09\u662f\u5426\u5b58\u5728\u7a0b\u5e8f\u8def\u5f84\uff0c\u4f7f\u5f97\u4e00\u4e2a\u5185\u5b58\u5bf9\u8c61\u79bb\u5f00\u5185\u6838\u7a7a\u95f4\u65f6\u5019\u6ca1\u6709\u88ab\u521d\u59cb\u5316\u3002<\/p>\n<ul>\n<li>\u8bba\u6587\u7b80\u4ecb\uff08\u53d1\u8868\u5728 InForSec\uff09\uff1ahttps:\/\/www.inforsec.org\/wp\/?p=1416<\/li>\n<\/ul>\n<h4><strong><b>iLock: Immediate and Automatic Locking of Mobile Devices against Data Theft<\/b><\/strong><\/h4>\n<p>Tao Li, Yimin Chen, Jinchao Sun, Xiaocong Jin, Yanchao Zhang (Arizona State University)<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1523\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724716.png\" alt=\"%e5%9b%be%e7%89%8716\" width=\"600\" height=\"497\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724716.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724716-300x249.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724716-181x150.png 181w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724716-150x124.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>on-code-execution-tracking-0<\/i><\/em><\/p>\n<p>iLock \u5229\u7528\u58f0\u97f3\u68c0\u6d4b\u624b\u673a\u662f\u5426\u4e22\u5931\uff0c\u5982\u679c\u4e22\u5931\u4e86\u5c31\u9501\u5b9a\u624b\u673a\u4fdd\u62a4\u624b\u673a\u5185\u7684\u4fe1\u606f\u3002\u5177\u4f53\u7684\u65b9\u6cd5\u662f\u4f7f\u7528\u4e86 FMCW \u7684\u65b9\u6cd5\uff0c\u4f20\u8f93\u7684\u4fe1\u53f7\u9891\u7387\u56de\u968f\u7740\u65f6\u95f4\u53d8\u5927\uff0c\u901a\u8fc7\u8ba1\u7b97\u63a5\u6536\u5230\u7684\u4fe1\u53f7\u7684\u65f6\u95f4\u5dee\uff0c\u5c31\u80fd\u5224\u65ad\u53cd\u5c04\u7269\u4f53\u7684\u8ddd\u79bb\u3002\u4e0b\u9762\u8fd9\u4e2a\u5c31\u662f FMCW \u7684\u793a\u610f\u56fe\uff1a<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1524\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724717.png\" alt=\"%e5%9b%be%e7%89%8717\" width=\"600\" height=\"348\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724717.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724717-300x174.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724717-250x145.png 250w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724717-150x87.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>ilock-1<\/i><\/em><\/p>\n<h4><strong><b>On Code Execution Tracking via Power Side-Channel<\/b><\/strong><\/h4>\n<p>Yannan Liu, Lingxiao Wei, Zhe Zhou, Kehuan Zhang (The Chinese University of Hong Kong), Wenyuan Xu (Zhejiang University) and Qiang Xu (The Chinese University of Hong Kong)<\/p>\n<p>\u8fd9\u7bc7\u6587\u7ae0\u662f\u7528 MCU \u7684 power side-channel \u6765\u5224\u65ad control-flow integrity\u3002\u5177\u4f53\u7684\u65b9\u6cd5\u662f\u901a\u8fc7 power trace \u628a CFG \u6784\u5efa\u4e3a\u4e00\u4e2a hidden Markov model\u3002\u4f5c\u8005\u5bf9\u539f\u59cb\u7684 HMM \u8fdb\u884c\u4e86\u4fee\u6539\u3002\u4f7f\u5728 CFG \u91cc\u7684\u4e00\u4e2a block \u8868\u793a HMM \u7684\u4e00\u4e2a node\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1525\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724718.png\" alt=\"%e5%9b%be%e7%89%8718\" width=\"600\" height=\"173\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724718.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724718-300x87.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724718-250x72.png 250w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724718-150x43.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>on-code-execution-tracking-1<\/i><\/em><\/p>\n<p>Singnal extraction \u662f\u8fd9\u7bc7\u6587\u7ae0\u7684\u53e6\u4e00\u8d21\u732e\uff0c\u5982\u4f55\u628a power signal \u62bd\u8c61\u4e3a observation symbol\uff1f\u5982\u4f55\u4fee\u6539 Viterbi algorithm \u4f7f\u5b83\u80fd\u591f\u5224\u65ad execution sequence \u662f\u5426\u662f HMM \u7684\u4e00\u90e8\u5206\uff08\u4e5f\u5c31\u662f\u5224\u65ad CFG \u662f\u5426\u88ab\u4fee\u6539\u4e86\uff09\u3002\u8be6\u7ec6\u5185\u5bb9\u53ef\u4ee5\u9605\u8bfb\u8bba\u6587\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1526\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724719.png\" alt=\"%e5%9b%be%e7%89%8719\" width=\"600\" height=\"295\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724719.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724719-300x148.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724719-250x123.png 250w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724719-150x74.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>on-code-execution-tracking-2<\/i><\/em><\/p>\n<h4><strong><b>Drammer: Deterministic Rowhammer Attacks on Mobile Platforms<\/b><\/strong><\/h4>\n<p>Victor van der Veen (Vrije Universiteit Amsterdam), Yanick Fratantonio, Martina Lindorfer (UC Santa Barbara), Daniel Gruss, Clementine Maurice (TU Graz), Giovanni Vigna (UC Santa Barbara), Herbert Bos, Kaveh Razavi and Cristiano Giuffrida (Vrije Universiteit Amsterdam)<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1527\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724720.png\" alt=\"%e5%9b%be%e7%89%8720\" width=\"600\" height=\"463\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724720.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724720-300x232.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724720-194x150.png 194w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724720-150x116.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>drammer-1<\/i><\/em><\/p>\n<p>\u8fd9\u7bc7\u6587\u7ae0\u6050\u6015\u662f\u672c\u5c4a CCS \u6700\u4e3a\u671f\u5f85\u7684\u4e86\u5427\uff0c\u4e00\u4e2a\u5f88\u5c0f\u7684\u5c4b\u5b50\u91cc\u6324\u6ee1\u4e86\u4eba\uff0c\u4f4d\u7f6e\u4e0d\u591f\uff0c\u5f88\u591a\u4eba\u5c31\u7ad9\u5728\u540e\u9762\u542c\u3002\u4f5c\u8005\u5229\u7528 Rowhammer \u653b\u51fb\u5de7\u5999\u7684\u62ff\u5230 root \u6743\u9650\u3002\u56e0\u4e3a\u662f memory \u7684\u7279\u6027\u5f15\u5165\u7684\u653b\u51fb\uff0c\u7cfb\u7edf\u4e5f\u6ca1\u6709\u4ec0\u4e48\u529e\u6cd5\u9632\u5fa1\u3002<\/p>\n<p>\u7b80\u5355\u6765\u8bf4\u5229\u7528\u4e86 &#8220;DRAM hardware glitch casing disturbance errors&#8221;\uff0c\u7ed3\u679c\u662f\u4f1a\u9020\u6210 DRAM \u4e2d\u7684 bit \u5728\u67d0\u4e9b\u60c5\u51b5\u4e0b\u7ffb\u8f6c\uff080 -&gt; 1 \u6216 1 -&gt; 0\uff09\u3002\u5e76\u4e14\u8fd9\u79cd bits flipping \u5728\u540c\u6837\u60c5\u51b5\u4e0b\u662f\u53ef\u4ee5\u91cd\u73b0\u7684\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1533\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724720-1.png\" alt=\"%e5%9b%be%e7%89%8720\" width=\"600\" height=\"440\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724720-1.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724720-1-300x220.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724720-1-205x150.png 205w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/\u56fe\u724720-1-150x110.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>drammer-2<\/i><\/em><\/p>\n<p>\u4f5c\u8005\u5229\u7528\u8fd9\u79cd\u201c\u7279\u6027\u201d\uff0c\u653b\u51fb page table entries\uff0c\u53ef\u4ee5\u8ba9\u67d0\u4e2a memory page mapping \u6307\u5411\u4e0a\u4e00\u4e2a page\uff0c\u4ece\u800c\u53ef\u4ee5\u5728 page table entry \u5199\u5165\u4efb\u610f\u503c\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1534\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/1.png\" alt=\"1\" width=\"600\" height=\"411\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/1.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/1-300x206.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/1-219x150.png 219w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/1-150x103.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>drammer-3<\/i><\/em><\/p>\n<p>\u4e4b\u540e\uff0c\u5199\u5165 kernel memory \u7684 page table entry \u5c31\u53ef\u4ee5\u8bbf\u95ee\u5230 kernel memory \u4e86\uff0c\u627e\u5230 struct cred \u4fee\u6539 uid \u548c gid \u5c31\u80fd\u62ff\u5230 root \u6743\u9650\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1535\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/2.png\" alt=\"2\" width=\"600\" height=\"352\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/2.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/2-300x176.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/2-250x147.png 250w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/2-150x88.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>drammer-4<\/i><\/em><\/p>\n<p>\u56e0\u4e3a\u8981\u4e0d\u65ad\u626b\u63cf DRAM \u627e\u5230\u4f1a\u53d1\u751f\u53cd\u8f6c\u7684 bit\uff0c\u4f5c\u8005 evaluate \u4e0d\u540c\u673a\u5668\u6240\u9700\u7684\u65f6\u95f4\uff1a<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1536\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/3.png\" alt=\"3\" width=\"600\" height=\"373\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/3.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/3-300x187.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/3-241x150.png 241w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/3-150x93.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>drammer-5<\/i><\/em><\/p>\n<p>Q&amp;A \u7684\u65f6\u5019\u8ba8\u8bba\u4e86\u9632\u5fa1\u7684\u65b9\u6cd5\uff08\u6682\u65f6\u6ca1\u6709\u597d\u7684\u89e3\u51b3\u65b9\u6848\uff09\uff0c\u5728 iPhone \u4e0a\u653b\u51fb\u7684\u53ef\u80fd\u6027\uff08\u5b8c\u5168\u6709\u53ef\u80fd\uff09\uff0c\u4ee5\u53ca\u5176\u4ed6\u7ec6\u8282\uff0c\u5efa\u8bae\u5927\u5bb6\u6d4f\u89c8\u4e00\u4e0b\u89c6\u9891\uff0c\u975e\u5e38\u6709\u8da3\u3002<\/p>\n<ul>\n<li>Drammer \u4e3b\u9875\uff1a<a href=\"https:\/\/www.vusec.net\/projects\/drammer\/\">https:\/\/www.vusec.net\/projects\/drammer\/<\/a><\/li>\n<li>CCS \u89c6\u9891\uff1a<a href=\"https:\/\/www.youtube.com\/watch?v=lTaMvBN1PoA\">https:\/\/www.youtube.com\/watch?v=lTaMvBN1PoA<\/a><\/li>\n<\/ul>\n<h3><strong><b>Panel Discussion: Impact of Academic Security Research: Frogs in Wells, Storms in Teacups, or Raw Diamonds?<\/b><\/strong><\/h3>\n<p>Chair: Ahmad-Reza Sadeghi, TU Darmstadt, CYSEC, Germany<\/p>\n<p>Panelists: Ross Anderson, University of Cambridge, UK Davide Balzarotti, EURECOM, France Robert Broberg, Cisco Systems Inc Bart Preneel, KU Leuven, Belgium Anand Rajan, Intel Labs Greg Shannon, White House Office of Science &amp; Technology Policy, USA<\/p>\n<p>\u4eca\u5e74\u7684 panel discussion \u4e5f\u662f\u975e\u5e38\u6709\u8da3\uff0c\u8bf7\u4e86\u4e24\u4f4d\u5b89\u5168\u5c4a\u524d\u8f88 Ross, Bart\uff0c\u4e24\u4f4d\u5de5\u4e1a\u754c\u7684 Anand (Intel), Robert (Cisco)\uff0c\u4e00\u4f4d\u653f\u5e9c\u7684 Greg (\u767d\u5bab\u79d1\u6280\u653f\u7b56\u529e\u516c\u5ba4\uff1f) \u548c\u4e00\u4f4d\u5e74\u8f7b\u6559\u6388 Davide\uff08\u5c31\u662f\u7edf\u8ba1\u4e86\u56db\u5927\u5b89\u5168\u4f1a\u8bae\u5341\u5e74\u6765\u7684\u6536\u5f55\u60c5\u51b5\u7684\u54ea\u4e2a\u6559\u6388\uff09\u3002<\/p>\n<p>\u8ba8\u8bba\u4e86\u51e0\u4e2a\u975e\u5e38\u6709\u4e89\u8bae\u7684\u8bdd\u9898\uff1a\u5b89\u5168\u5b66\u672f\u7814\u7a76\u7684\u4ef7\u503c\uff0cattack v.s. defense \u54ea\u4e2a\u66f4\u91cd\u8981\uff0c\u56db\u5927\u5b89\u5168\u4f1a\u8bae\u6536\u5f55 paper \u7684\u73b0\u72b6\uff0c\u5e94\u7528\u5bc6\u7801\u5b66\u548c\u4f20\u7edf\u5bc6\u7801\u5b66\u7684\u51b2\u7a81\uff0c\u672a\u6765\u5b89\u5168\u7814\u7a76\u7684\u53d1\u5c55\u65b9\u5411\uff08\u4f8b\u5982\uff1ausable security\uff09\u3002\u6211\u628a\u73b0\u573a\u51e0\u4e2a\u6709\u610f\u601d\u7684\u56fe\u7247\u53d1\u51fa\u6765\uff0c\u611f\u5174\u8da3\u4e86\u5927\u5bb6\u53bb\u770b\u89c6\u9891 \u5427\uff1a<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1537\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/4.png\" alt=\"4\" width=\"600\" height=\"227\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/4.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/4-300x114.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/4-250x95.png 250w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/4-150x57.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1538\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/5.png\" alt=\"5\" width=\"600\" height=\"450\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/5.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/5-300x225.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/5-200x150.png 200w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/5-150x113.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1539\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/6.png\" alt=\"6\" width=\"600\" height=\"450\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/6.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/6-300x225.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/6-200x150.png 200w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/6-150x113.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1540\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/7.png\" alt=\"7\" width=\"600\" height=\"363\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/7.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/7-300x182.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/7-248x150.png 248w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/7-150x91.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1541\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/8.png\" alt=\"8\" width=\"600\" height=\"423\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/8.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/8-300x212.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/8-213x150.png 213w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/8-150x106.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1542\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/9.png\" alt=\"9\" width=\"600\" height=\"394\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/9.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/9-300x197.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/9-228x150.png 228w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/9-150x99.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1543\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/10.png\" alt=\"10\" width=\"600\" height=\"399\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/10.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/10-300x200.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/10-226x150.png 226w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/10-150x100.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1544\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/11.png\" alt=\"11\" width=\"600\" height=\"450\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/11.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/11-300x225.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/11-200x150.png 200w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/11-150x113.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p>\u89c6\u9891\u5730\u5740\uff1a<a href=\"https:\/\/www.youtube.com\/watch?v=yT2pTElBY4Q&amp;index=3&amp;list=PLDJxfCuZwWGA0s641b-G3LX6CAyAcVepx\">https:\/\/www.youtube.com\/watch?v=yT2pTElBY4Q&amp;index=3&amp;list=PLDJxfCuZwWGA0s641b-G3LX6CAyAcVepx<\/a><\/p>\n<p>System Security Circus v2.0: <a href=\"http:\/\/s3.eurecom.fr\/~balzarot\/notes\/top4\/index.html\">http:\/\/s3.eurecom.fr\/~balzarot\/notes\/top4\/index.html<\/a><\/p>\n<p>\u8fd9\u4e2a System Security Circus \u603b\u7ed3\u4e86\u56db\u5927\u5b89\u5168\u4f1a\u8bae\u4ece 2000 \u5e74\u4ee5\u6765\u7684\u6240\u6709\u6587\u7ae0\u4f5c\u8005\uff0c\u63a5\u53d7\u7387\uff0c\u63d0\u4ea4\u6570\u91cf\uff0c\u4f5c\u8005\u5730\u7406\u5206\u5e03\uff0c\u4f5c\u8005\u6240\u5728\u5355\u4f4d\u7b49\u7b49\u3002\u91cc\u9762\u5305\u542b\u7684\u56fe\u8868\u975e\u5e38\u6709\u8da3\uff0c\u4e5f\u4e00\u90e8\u5206\u4ee3\u8868\u4e86\u8fd9\u5341\u51e0\u5e74\u6765 security community \u7684\u53d1\u5c55\u53d8\u5316\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1545\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/12.png\" alt=\"12\" width=\"600\" height=\"219\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/12.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/12-300x110.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/12-250x91.png 250w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/12-150x55.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>system-security-circus<\/i><\/em><\/p>\n<h3><strong><b>Traditional Viennese Dinner @ Heuriger<\/b><\/strong><\/h3>\n<p>\u5728\u7ef4\u4e5f\u7eb3\u90ca\u533a\u7684\u4e00\u4e2a\u9152\u5e84\uff0c\u8461\u8404\u9152\u5f88\u597d\u559d \ud83d\ude42<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1546\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/13.png\" alt=\"13\" width=\"600\" height=\"386\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/13.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/13-300x193.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/13-233x150.png 233w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/13-150x97.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>Screen Shot 2016-11-12 at 2.16.53 PM<\/i><\/em><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1547\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2016\/11\/14.png\" alt=\"14\" width=\"600\" height=\"380\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/14.png 600w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/14-300x190.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/14-237x150.png 237w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2016\/11\/14-150x95.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><em><i>Screen Shot 2016-11-12 at 2.17.01 PM<\/i><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u6587\/\u5b59\u8317\u73c5 \u9999\u6e2f\u4e2d\u6587\u5927\u5b66 UniSan: Proactive Kernel Memory Initi&#8230; <a class=\"continue-reading-link\" href=\"http:\/\/202.112.238.40\/wp\/?p=1519\"> Continue reading <span class=\"meta-nav\">&rarr; <\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-1519","post","type-post","status-publish","format-standard","hentry","category-research"],"_links":{"self":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/1519","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1519"}],"version-history":[{"count":3,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/1519\/revisions"}],"predecessor-version":[{"id":1549,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/1519\/revisions\/1549"}],"wp:attachment":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1519"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1519"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1519"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}