full-disclosure - SyScan'06 Highlight - Attacking Microsoft New Operating System (Vista)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <449564E4.5060601@singnet.com.sg>
Date: Sun Jun 18 17:14:06 2006
From: thomas48 at singnet.com.sg (thomas48)
Subject: SyScan'06 Highlight - Attacking Microsoft New
	Operating System (Vista)

This is a brand new presentation and its going public for the very first 
time in SyScan'06.

Joanna Rutkowska, a senior researcher of COSEINC Research, will present 
her latest technique in bypassing and attacking the latest Mircosoft 
Vista operating system kernel.

The presentation will first present how to generically (i.e. not 
relaying on any implementation bug) insert arbitrary code into the 
latest Vista Beta 2 kernel (x64 edition), thus effectively bypassing the 
(in)famous Vista policy for allowing only digitally singed code to be 
loaded into kernel. The presented attack does not requite system reboot.

Next, creation of Stealth by Design malware for Vista x64 will be 
briefly discussed. This will be the base for introducing the new 
approach (codenamed 'blue pill') for writing undetectable malware on the 
latest AMD64 processors. The ultimate goal is to demonstrate that is 
possible (or soon will be) to create an undetectable malware which is 
not based on a concept, but, similarly to modern cryptography, on the 
strength of the 'algorithm'.

A working blue pill will be demonstrated.

Please visit www.syscan.org for more.