Abstract

Starting with Windows Vista, Microsoft introduced many security features in the operating systems which were further improved upon in Windows 7 and Windows 8, some well-know security features, such as DEP, ASLR, and other security features which use against specific attack method is less know. In this talk, MJ0011 will discuss a security feature introduced from Windows Vista which is against admin-to-ring0 attack, and how to use an unpublished underlying hardware protocol implementation bug to bypass this security feature in Windows Vista/7/8 and 8.1.