{"id":2961,"date":"2019-01-29T10:54:13","date_gmt":"2019-01-29T02:09:13","guid":{"rendered":"https:\/\/www.inforsec.org\/wp\/?p=2961"},"modified":"2019-01-29T11:01:45","modified_gmt":"2019-01-29T02:16:45","slug":"%e3%80%90ppt%e5%88%86%e4%ba%ab%e3%80%91%e4%b8%8a%e6%b5%b7%e4%ba%a4%e9%80%9a%e5%a4%a7%e5%ad%a6%e6%9d%8e%e5%8d%b7%e5%ad%ba-%e5%8f%b8%e5%8d%97-%e5%ae%9a%e4%bd%8d%e4%ba%8c%e8%bf%9b","status":"publish","type":"post","link":"http:\/\/202.112.238.40\/wp\/?p=2961","title":{"rendered":"\u3010PPT\u5206\u4eab\u3011\u4e0a\u6d77\u4ea4\u901a\u5927\u5b66\u674e\u5377\u5b7a \u2014\u2014\u53f8\u5357: \u5b9a\u4f4d\u4e8c\u8fdb\u5236\u7a0b\u5e8f\u6267\u884c\u4e2d\u7684\u4e0d\u5b89\u5168\u5bc6\u94a5"},"content":{"rendered":"

1\u670818\u65e5\uff0c\u7f51\u7edc\u5b89\u5168\u7814\u7a76\u56fd\u9645\u5b66\u672f\u8bba\u575bInForSec2019\u5e74\u5e74\u4f1a\u5728\u6e05\u534e\u5927\u5b66\u4e3e\u529e\u3002\u00a0\u4e0a\u6d77\u4ea4\u901a\u5927\u5b66\u674e\u5377\u5b7a\u5728\u4f1a\u4e0a\u4f5c\u4e86\u300a\u53f8\u5357: \u5b9a\u4f4d\u4e8c\u8fdb\u5236\u4ee3\u7801\u4e2d\u7684\u4e0d\u5b89\u5168\u5bc6\u94a5\u300b\u7684\u62a5\u544a\uff0c\u5206\u4eab\u4e86\u81ea\u5df1\u7684\u7814\u7a76\u6210\u679c\u3002<\/p>\n

\"\"<\/a><\/p>\n

\u4e0a\u6d77\u4ea4\u901a\u5927\u5b66\u674e\u5377\u5b7a<\/p>\n

\u6f14\u8bb2<\/b><\/strong>\u4e3b\u9898\uff1a<\/b><\/strong>K-Hunt: Pinpointing Insecure Cryptographic Keys from Execution Traces\uff08\u53f8\u5357: \u5b9a\u4f4d\u4e8c\u8fdb\u5236\u7a0b\u5e8f\u6267\u884c\u4e2d\u7684\u4e0d\u5b89\u5168\u5bc6\u94a5\uff09\u2192PPT\u4e0b\u8f7d<\/span><\/a><\/b><\/strong><\/p>\n

\u5185\u5bb9<\/b><\/strong>\u6458\u8981\uff1a<\/b><\/strong>\u5bc6\u94a5\uff08crypto keys\uff09\u662f\u73b0\u4ee3\u5bc6\u7801\u5b66\u4e2d\u81f3\u5173\u91cd\u8981\u7684\u79d8\u5bc6\u4fe1\u606f\uff0c\u4e5f\u662f\u5bc6\u7801\u7cfb\u7edf\u4e2d\u9700\u8981\u4fdd\u5bc6\u7684\u552f\u4e00\u5143\u7d20\u3002\u7406\u89e3\u5bc6\u94a5\u5728\u5bc6\u7801\u8f6f\u4ef6\u4e2d\u7684\u4f7f\u7528\u3001\u53d1\u73b0\u4e0d\u5b89\u5168\u7684\u5bc6\u94a5\u4f7f\u7528\u7279\u4f8b\uff0c\u5bf9\u4e8e\u5bc6\u7801\u5b66\u7cfb\u7edf\u7684\u5b89\u5168\u5ba1\u8ba1\u800c\u8a00\u6781\u4e3a\u5173\u952e\u3002\u4e3a\u4e86\u5e2e\u52a9\u5206\u6790\u4eba\u5458\u66f4\u597d\u5730\u5b9a\u4f4d\u5bc6\u94a5\u3001\u5206\u6790\u5bc6\u94a5\u5728\u8f6f\u4ef6\u4e2d\uff08\u7279\u522b\u662f\u4e8c\u8fdb\u5236\u4ee3\u7801\u4e2d\uff09\u7684\u4f7f\u7528\uff0c\u6211\u4eec\u8bbe\u8ba1\u5e76\u5b9e\u73b0\u4e86K-Hunt\uff0c\u4e00\u6b3e\u57fa\u4e8e\u4e8c\u8fdb\u5236\u4ee3\u7801\u63d2\u6869\u5206\u6790\u7684\u5bc6\u94a5\u81ea\u52a8\u5316\u5b89\u5168\u5206\u6790\u7cfb\u7edf\u3002K-Hunt\u5173\u6ce8\u5bc6\u94a5\u4f7f\u7528\u7684\u672c\u8d28\u7279\u5f81\u4ece\u800c\u5b9a\u4f4d\u5bc6\u94a5\u533a\u57df\uff08key buffers\uff09\uff0c\u7ee7\u800c\u8ffd\u8e2a\u5bc6\u94a5\u6570\u636e\u7684\u6574\u4e2a\u751f\u547d\u5468\u671f\uff08\u751f\u6210\u3001\u4f7f\u7528\u548c\u9500\u6bc1\uff09\uff0c\u4ece\u4e2d\u53d1\u73b0\u4e0d\u5b89\u5168\u7684\u5bc6\u94a5\u4f7f\u7528\u95ee\u9898\u3002K-Hunt\u7684\u8bbe\u8ba1\u54f2\u5b66\u4fdd\u8bc1\u5b83\u4e0d\u9700\u8981\u7279\u5b9a\u7684\u5bc6\u7801\u7b97\u6cd5\u77e5\u8bc6\u5c31\u80fd\u53d1\u73b0\u4e0d\u5b89\u5168\u5bc6\u94a5\u4f7f\u7528\u2014\u2014\u901a\u8fc7\u5bf910\u6b3e\u5178\u578b\u7684\u5bc6\u7801\u5b66\u7b97\u6cd5\u5e93\u548c15\u4e2a\u5bc6\u7801\u5b66\u8f6f\u4ef6\u7684\u5206\u6790\u8868\u660e\uff0cK-Hunt\u4e0d\u4ec5\u5e7f\u8c31\u5730\u5b9a\u4f4d\u4e86\u6240\u4f7f\u7528\u7684\u5bf9\u79f0\u3001\u975e\u5bf9\u79f0\u5bc6\u7801\u7b97\u6cd5\u4e2d\u7684\u5bc6\u94a5\u4fe1\u606f\uff0c\u8fd8\u5728\u8fd925\u4e2a\u6d4b\u8bd5\u7528\u4f8b\u4e2d\u53d1\u73b0\u5176\u4e2d22\u4e2a\u5747\u5b58\u5728\u5bc6\u94a5\u7684\u4e0d\u5b89\u5168\u4f7f\u7528\uff0c\u5176\u4e2d\u5305\u62ec\u77e5\u540d\u7684\u5bc6\u7801\u7b97\u6cd5\u5e93\uff08Libsodium\uff0c Nettle\uff0c TomCrypt\uff0c WolfSSL\uff09<\/p>\n","protected":false},"excerpt":{"rendered":"

1\u670818\u65e5\uff0c\u7f51\u7edc\u5b89\u5168\u7814\u7a76\u56fd\u9645\u5b66\u672f\u8bba\u575bInForSec2019\u5e74\u5e74\u4f1a\u5728\u6e05\u534e\u5927\u5b66\u4e3e\u529e\u3002\u00a0\u4e0a\u6d77\u4ea4\u901a\u5927\u5b66\u674e\u5377… Continue reading → <\/span><\/a><\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-2961","post","type-post","status-publish","format-standard","hentry","category-events"],"_links":{"self":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/2961","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2961"}],"version-history":[{"count":8,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/2961\/revisions"}],"predecessor-version":[{"id":2983,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/2961\/revisions\/2983"}],"wp:attachment":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2961"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2961"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2961"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}