Control-Flow Integrity Courses and Certifications

Linux Plumbers Conference

Finer-Grained Kernel Control Flow Integrity and Challenges

Explore kernel control flow integrity challenges including forward CFI, backward CFI, shadow stack allocations, and eBPF integration for enhanced security.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Black Hat

Out of Control - How KCFG and KCET Redefine Control Flow Integrity in the Windows Kernel

Explore how KCFG and KCET revolutionize Windows kernel security through hypervisor-based control flow integrity, reshaping exploitation techniques and defensive strategies.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Black Hat

How to Survive the Hardware Assisted Control-Flow Integrity Enforcement

Deep dive into Intel CET on Windows 10, exploring control-flow integrity enforcement and potential vulnerabilities. Includes demonstrations of attacks and ways to circumvent CET protection.

• YouTube
• 1 hour 5 minutes
• On-Demand
• Conference Talk

Black Hat

Lost Control - Breaking Hardware-Assisted Kernel Control-Flow Integrity with Page-Oriented Programming

Explore techniques to bypass hardware-assisted kernel control-flow integrity using page-oriented programming, revealing vulnerabilities in modern operating system security mechanisms.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Making C Less Dangerous

Exploring strategies to enhance C language safety in Linux kernel development, focusing on undefined behaviors, memory management, and control flow integrity.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

linux.conf.au

Making C Less Dangerous in the Linux Kernel

Exploring strategies to enhance C safety in the Linux kernel, including removing Variable Length Arrays, enforcing stack variable initialization, and implementing Control Flow Integrity measures.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Black Hat

Detecting Kernel Exploits with eBPF

Explore eBPF's evolution in Linux, its expanding capabilities, and its potential for detecting kernel exploits, with insights on probes, challenges, and performance implications.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Black Hat

Capturing 0Day Exploits With Perfectly Placed Hardware Traps

Innovative hardware-assisted approach to prevent control-flow hijack attacks, using processor features for real-time detection and prevention of abnormal branches in Windows and Linux systems.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Black Hat

Return to Where? You Can't Exploit What You Can't Find

Explore advanced techniques for detecting and preventing memory corruption vulnerabilities, including execute-only memory and code pointer hiding, to enhance software security against sophisticated exploitation methods.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Black Hat

The Beast is in Your Memory

Explore advanced exploitation techniques and control-flow integrity mechanisms. Learn about Return-Oriented Programming, its countermeasures, and how to bypass emerging CFI solutions.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Black Hat

Taking Kernel Hardening to the Next Level

Explore advanced kernel hardening techniques, focusing on CFI and UAF defense. Learn about new approaches to enhance OS security against evolving exploitation methods.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Bypassing Control Flow Guard in Windows 10

Explore advanced Windows 10 security bypassing techniques, focusing on Control Flow Guard. Learn about memory corruption, relaxed control flow, and innovative bypass methods.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Year in Review - Android Kernel Security

Comprehensive overview of Android kernel security, analyzing vulnerabilities, discussing mitigations, and exploring future improvements for enhanced platform protection.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

IEEE

WarpAttack - Bypassing CFI through Compiler-Introduced Double-Fetches

Explore a novel attack technique that exploits compiler-introduced vulnerabilities to bypass Control Flow Integrity, uncovering potential security risks in modern software systems.

• YouTube
• 15 minutes
• On-Demand
• Conference Talk

Association for Computing Machinery (ACM)

On Code Execution Tracking via Power Side-Channel

Explore power side-channel analysis for code execution tracking in embedded systems, covering key extraction attacks, control flow integrity, and Hidden Markov Models for security applications.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk