Organizer
Partner Company
Advanced Defense for Internet Explorer
Bo Qu, Royce Lu, @ga1oi
Palo Alto Networks
Abstract
Microsoft has introduced some brand new defensive mechanisms in recent patches regarding heap and its protection. This protection raised the bar for exploitation of Internet Explorer, however, there are still ways to get full control of EIP for certain kind of vulnerabilities. In this talk, we are going to discuss some enhancement in Javascript and Flash. Besides, we will introduce a novel idea for heap protection based on our understanding and experience in exploitation. Also, we will show how this new mechanism stops almost all known exploits without affecting the performance and user experience.
Speaker Info
Bo Qu is a Principle Engineer from Palo Alto Networks. His skills include vulnerability research and exploitation, bug hunting, reverse engineering, binary diff, exploitability research and analysis, and vulnerability reproducing and coverage. He also does research on iOS, Android and other mobile OS security.
Royce Lu
ChienHua (Royce) Lu is a Security Researcher from Palo Alto Networks. He is interested in anti-malware technology, reverse engineering, kernel programming, virtualization, and exploit detection.
@ga1ois works as a security researcher in Palo Alto Networks, focusing on security of browser and flash. He was also a CanSecWest speaker.