Compilers: The Old New Security Frontier [pdf](grsecurity.net)

64 pointsby zdw4 ปีที่แล้ว5 comments

Compilers: The Old New Security Frontier [pdf]

https://grsecurity.net/Compilers_The_Old_New_Security_Frontier_BlueHat_IL_2022.pdf

2 comments

Veserv4 ปีที่แล้ว

The problem with these sorts of mitigations is that they take programs that are insecure by design on systems never intended to be secure and attempt to automagically retrofit security onto them. This has improved the prevailing security in many of these low security designs from laughably easy to requiring actual professional efforts by singular individuals, but are still, conservatively speaking, 100x worse than actual high security systems designed, proven, and verified to protect against high attack potential threat actors such as state actors and international organized crime who have teams of hundreds instead of being limited to small scale individual operations.

The real frontier for high security has been and continues to be adopting and then streamlining the implementation of the methodologies in use for decades demonstrated to be 100x better than the last 20 years of mitigations combined.

saagarjha4 ปีที่แล้ว

After all the vulnerabilities found in C(++) every major kernel today uses them and continues to use them in unsafe ways and gets exploited. Research is great and all, but in practice rewriting everything greenfield is not going to work so we're going to have to invest in both.

bigcat1234 ปีที่แล้ว

duped4 ปีที่แล้ว

Is there a talk that goes along with the slides?

monocasa4 ปีที่แล้ว

It was at BlueHat a couple weeks ago. The talk will probably show up on youtube in a month or two like has happened for previous BlueHats.

WalterBright4 ปีที่แล้ว

Yes, the slides are clearly meant to be a supplement to the talk, and don't stand on their own.