Learn AI, Data Science & Business — Earn Certificates That Get You Hired
Learn Generative AI, Prompt Engineering, and LLMs for Free
Overview
AI, Data Science & Cloud Certificates from Google, IBM & Meta — 40% Off
One plan covers every Professional Certificate on Coursera. 40% off Coursera Plus Annual.
Unlock All Certificates
Explore the intricate world of Flash sandboxing technology in this Black Hat USA 2012 conference talk. Delve into the internals of three sandbox implementations for Adobe's Flash Player: Protected Mode Flash for Chrome, Protected Mode Flash for Firefox, and Pepper Flash. Gain insights into the high-level architecture of each sandbox implementation, understanding the roles of different processes and their interconnections. Examine the internal sandbox mechanisms, including restrictions, IPC protocols, and services exposed by higher-privileged processes. Analyze the security aspects, current limitations, and weaknesses of each implementation, and discover potential avenues for sandbox bypasses or escapes. Compare and contrast the various differences between these implementations throughout the presentation. Witness demonstrations of Flash sandbox escape vulnerabilities uncovered during the research process.
Syllabus
Introduction
Overview
Targets
Sandbox Architecture
Sandbox Mechanism
Sandbox Restrictions
Interprocess Communication
Services Exposed
Policy Engine
Sandbox Limitations
Sandbox Escapes
Demo
Taught by
Black Hat