Tag Archives: security

USB Fuzzing: A USB Perspective

Posted on July 17, 2019 by daveti

Syzkaller [1] starts to support USB fuzzing recently and has already found over 80 bugs within the Linux kernel [2]. Almost every fuzzing expert whom I talked to has started to apply their fuzzing techniques to USB because of the … Continue reading →

Posted in Security | Tagged , , , , , , , , , , | 3 Comments

Defending Against Malicious USB Firmware with GoodUSB

Posted on December 3, 2015 by daveti

Finally, 4 months after our paper was accepted by ACSAC’15, I could now write a blog talking about our work – GoodUSB, and release the code, due to some software patent bul*sh*t. (I sincerely think software patent should be abolished … Continue reading →

Posted in OS, Security | Tagged , , , , , , , | 2 Comments

Trustworthy Whole-System Provenance for the Linux Kernel

Posted on July 19, 2015 by daveti

Our paper “Trustworthy Whole-System Provenance for the Linux Kernel” has been accepted by USENIX Security 2015. While details could be found in the paper (link below), I would like to talk about some background about LPM (a.k.a., Linux Provenance Module, … Continue reading →

Posted in OS, Security | Tagged , , , , , , , , | Leave a comment

More Guidelines Than Rules: CSRF Vulnerabilities from Noncompliant OAuth 2.0 Implementations

Posted on April 12, 2015 by daveti

Our paper, as titled, has been accepted by DIMVA 2015 – Milano, Italy. While the final paper will not be released until July, we will have a brief summary of what we have done in this post. Another focus here … Continue reading →

Posted in Security | Tagged , , , , , | 1 Comment

arpsec – Securing ARP from the Ground Up

Posted on February 26, 2015 by daveti

Our paper “Securing ARP from the Ground Up” has been accepted as a short paper by CODASPY15, which will be in San Antonio, TX from March 2nd to 4th. In this post, we will talk about our solution to ARP … Continue reading →

Posted in Network, OS, Security | Tagged , , , , , , , , , , , , , | 2 Comments

fsl – Fedora Security Lab

Posted on July 20, 2013 by daveti

fsl (Fedora Security Lab) is a customized Fedora OS for security hack/test based Fedora 19. Like the famous BackTrace Linux, fsl has integrated a butch of security tools. To take the advantage of fsl, either security liveCD or all the … Continue reading →

Posted in Dave's Tools, OS, Security | Tagged , , , , , | Leave a comment

shellcode 1 – comments for the doc “The Basics of Shellcoding”

Posted on February 10, 2012 by daveti

Recently been doing some stuffs on Shellcode. After a while wandering in the net, I found the doc “The Basics of Shellcoding” by Angelo Rosiello may be the very concise introduction to start with shellcoding, especially for the newbie like … Continue reading →

Posted in Security | Tagged , , , , , | Leave a comment