Exploit in Classic - Speaker Deck

Slide 1

Slide 1 text

久保俊平 @MC_SEC_KB / @bou_san3 @MC_SEC_KB

Slide 2

Slide 2 text

・MENU ▪ Glossary ：Vulnerability ▪ Glossary ：Exploit ▪ Glossary ：Money/Noodle ▪ Case in Classic ：Time Noodle ▪ Illustrative example ：Time Noodle ▪ Reconsideration ：Time Noodle ▪ Vulnerability 1, 2 ：Time Noodle ▪ Countermeasures 1,2,3：Time Noodle ▪ Conclusion ：Time Noodle

Slide 3

Slide 3 text

▪ Vulnerability is : ▪ 「Vulnerability refers to the inability (of a system or a unit) to withstand the effects of a hostile environment. A window of vulnerability (WOV) is a time frame within which defensive measures are diminished, compromised or lacking」 ▪ （From Wikipedia「Vulnerability」）

Slide 4

Slide 4 text

▪ Exploit is : ▪ 「An exploit (from the English verb to exploit, meaning "to use something to one’s own advantage") is a piece of software, a chunk of data, or a sequence of commands that takes advantage of a bug or vulnerability to cause unintended or unanticipated behavior to occur on computer software, hardware, or something electronic (usually computerized). Such behavior frequently includes things like gaining control of a computer system, allowing privilege escalation, or a denial-of-service (DoS or related DDoS) attack.」 ▪ （From Wikipedia「Exploit」）

Slide 5

Slide 5 text

▪ In this short story, there is a name of unit of money “Mon” ▪ 1 Mon ≒ 10cent. ▪ And the name of noodle in this story is 2x8 noodle. ▪ because the price of noodle is 16 Mon.

Slide 6

Slide 6 text

▪ Guest：Entered in noodle shop and ordered 2x8 noodle(priced 16 mon), but having only 15 Mon. So, 1 mon is short for 2x8 noodle . ▪ Guest : ( After completed meal ) How much ? ▪ Master：Fee is 16 Mon. ▪ Guest：OK. But I have only change, please count one by one. ▪ Master：OK. 1,2,3,4,5,6,7,8,,, ▪ Guest：Hey, by the way, what time is it now ? ▪ Master：Yeah, it is 9 . ▪ Guest：Oh, it’s 9. Thanks, and go ahead. ▪ Master：10,11,12,13,14,15,16… ▪ Master：Just 16 mon. Thanks you very much. ▪ Guest：Bye. ▪ Master：（Counting money again）Oh ! 1 mon is short ! Master Guest

Slide 7

Slide 7 text

Master Guest Fee is 16 Mon. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15

Slide 8

Slide 8 text

Fee is 16 Mon. 9 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Master Guest

Slide 9

Slide 9 text

Fee is 16 Mon. 9 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 What time is it now ? Master Guest

Slide 10

Slide 10 text

Fee is 16 Mon. 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 What time is it now ? It is 9 . Master Guest

Slide 11

Slide 11 text

Fee is 16 Mon. 1 2 3 4 5 6 7 8 9 It is 9. Thanks, and go ahead. 9 10 11 12 13 14 15 10 11 12 13 14 15 16 Master Guest

Slide 12

Slide 12 text

Fee is 16 Mon. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 9 10 11 12 13 14 15 16 It is 9. Thanks, and go ahead. Master Guest

Slide 13

Slide 13 text

Fee is 16 Mon. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 Verify the price… Master Guest

Slide 14

Slide 14 text

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 Completely match ! Master Guest Fee is 16 Mon. Verify the price…

Slide 15

Slide 15 text

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 Completely match ! Master Guest Just the amount . Fee is 16 Mon. Verify the price…

Slide 16

Slide 16 text

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 Completely match ! Master Guest Just the amount . Bye! Verify the price… Fee is 16 Mon.

Slide 17

Slide 17 text

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Oh! 1 Mon is short !! （Counting money again…） Master Guest is gone .

Slide 18

Slide 18 text

W H Y ? Master

Slide 19

Slide 19 text

① Fee is 16 Mon. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 9 10 11 12 13 14 15 16 Master Guest

Slide 20

Slide 20 text

① Gue st Fee is 16 Mon. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 9 10 11 12 13 14 15 16 Inadequate variables for storing values. （Only one variables count money and time.） Master

Slide 21

Slide 21 text

② Master Guest Fee is 16 Mon. 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 What time is it now ? It is 9 .

Slide 22

Slide 22 text

② Master Guest Fee is16 Mon. 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 What time is it now ? It is 9 . Interruption enabled (While counting, another process can forcefully run.)

Slide 23

Slide 23 text

Master What should I do ?

Slide 24

Slide 24 text

① Master Guest Fee is 16 Mon. 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 What time is it now ? 9 Currency Time

Slide 25

Slide 25 text

① 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 What time is it now ? It is 9 . 9 Master Guest Fee is 16 Mon. Currency Time

Slide 26

Slide 26 text

① 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 It is 9 . It is 9. Thanks, and go ahead. 9 Master Guest Fee is 16 Mon. Currency Time

Slide 27

Slide 27 text

① 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 It is 9 . It is 9. Thanks, and go ahead. 9 Master Guest Fee is 16 Mon. Currency Time

Slide 28

Slide 28 text

① 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 9 1 Mon is short ! Master Guest Fee is 16 Mon. Currency Time

Slide 29

Slide 29 text

① Gue st 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 9 1 Mon is short ! Inadequate variables for storing values. ↓ Distinguishing between Currency and Time variables Master Fee is 16 Mon. Currency Time

Slide 30

Slide 30 text

② Fee is 16 Mon. 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 What time is it now ? Master Guest

Slide 31

Slide 31 text

② Fee is 16 Mon. 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 What time is it now ? Now I am counting ! Please be quiet ! Master Guest

Slide 32

Slide 32 text

② Gue st Fee is 16 Mon. 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 What time is it now ? Interruption disabled. Now I am counting ! Please be quiet ! Master

Slide 33

Slide 33 text

③ 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Fee is 16 Mon. Master Guest

Slide 34

Slide 34 text

③ 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Fee is 16 Mon. Master Guest

Slide 35

Slide 35 text

③ 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Fee is 16 Mon. What time is it now ? Master Guest

Slide 36

Slide 36 text

③ 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 What time is it now ? Please put money ! Master Guest

Slide 37

Slide 37 text

③ 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Not enough money! Master Guest

Slide 38

Slide 38 text

③ 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 CAUTION ! Master Guest

Slide 39

Slide 39 text

③ 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 CAUTION ! Master Arrest

Slide 40

Slide 40 text

③ 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 CAUTION ! Automation Master Arrest

Slide 41

Slide 41 text

We call it Exploit to misuse the vulnerability in the system.

Slide 42

Slide 42 text

We call it Exploit to misuse the vulnerability in the system. We shouldn’t to show or overcome the weaknesses. And don't forget the other change.

Slide 43

Slide 43 text

We call it Exploit to misuse the vulnerability in the system. We shouldn’t to show or overcome the weaknesses. And don't forget the other change. You need to patch the system's vulnerability as if you patch the torn clothes.

Slide 44

Slide 44 text

We call it Exploit to misuse the vulnerability in the system. We shouldn’t to show or overcome the weaknesses. And don't forget the other change. Getting the OS ready. Don’t turn off your computer. You need to patch the system's vulnerability as if you patch the torn clothes.

Slide 45

Slide 45 text

We call it Exploit to misuse the vulnerability in the system. We shouldn’t to show or overcome the weaknesses. And don't forget the other change. We couldn’t complete the updates. Undoing changes. Don’t turn off your computer. You need to patch the system's vulnerability as if you patche the rotn clothes.