Attacking Hypervisors Using Firmware And Hardware
Analysts investigate attack surfaces and defenses concerning Attacking Hypervisors Using Firmware And Hardware.
Summary
Overview: We will also show how a firmware rootkit based on these vulnerabilities could expose secrets within virtual machines and explain how firmware issues can be used for analysis of hypervisor-protected content such as VMCS structures, EPT tables, host physical addresses (HPA) map, IOMMU page tables etc. To enable further hypervisor security testing, we will also be releasing new modules in the open source CHIPSEC framework to test issues in hypervisors when virtualizing hardware.
Related talks
Wireless Village·33 min
Travis Goodspeed
Travis Goodspeed provides an update on the Goodwatch open-source wrist-worn RF radio hacking and packet manipulation platform.
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.
Main Stage·44 min
Yuriy Bulygin
Intel Security researcher Yuriy Bulygin explores firmware and hardware emulation vulnerabilities in modern hypervisors, demonstrating SMM privilege escalation from guest VMs.