$30 off During Our Annual Pro Sale. View Details »

Exploit in Classic

Exploit in Classic

In Japanese tradtional comedy, Rakugo, has some interesting story about vulnerability and exploit.
And I do not intend to insult a specific OS, but we sometimes see such a situation.

ぼうさん

April 17, 2019
Tweet

More Decks by ぼうさん

Other Decks in Technology

Transcript

  1. 久保 俊平 @MC_SEC_KB / @bou_san3
    @MC_SEC_KB

    View Slide

  2. ・MENU
    ▪ Glossary :Vulnerability
    ▪ Glossary :Exploit
    ▪ Glossary :Money/Noodle
    ▪ Case in Classic :Time Noodle
    ▪ Illustrative example :Time Noodle
    ▪ Reconsideration :Time Noodle
    ▪ Vulnerability 1, 2 :Time Noodle
    ▪ Countermeasures 1,2,3:Time Noodle
    ▪ Conclusion :Time Noodle

    View Slide

  3. ▪ Vulnerability is :
    ▪ 「Vulnerability refers to the inability
    (of a system or a unit) to withstand
    the effects of a hostile environment.
    A window of vulnerability (WOV) is
    a time frame within which defensive
    measures are diminished,
    compromised or lacking」
    ▪ (From Wikipedia「Vulnerability」)

    View Slide

  4. ▪ Exploit is :
    ▪ 「An exploit (from the English verb to exploit, meaning "to use something to one’s own
    advantage") is a piece of software, a chunk of data, or a sequence of commands that takes
    advantage of a bug or vulnerability to cause unintended or unanticipated behavior to
    occur on computer software, hardware, or something electronic (usually computerized).
    Such behavior frequently includes things like gaining control of a computer system,
    allowing privilege escalation, or a denial-of-service (DoS or related DDoS) attack.」
    ▪ (From Wikipedia「Exploit」)

    View Slide

  5. ▪ In this short story, there is a name of unit of money “Mon”
    ▪ 1 Mon ≒ 10cent.
    ▪ And the name of noodle in this story is 2x8 noodle.
    ▪ because the price of noodle is 16 Mon.

    View Slide

  6. ▪ Guest:Entered in noodle shop and ordered 2x8 noodle(priced 16 mon),
    but having only 15 Mon. So, 1 mon is short for 2x8 noodle .
    ▪ Guest : ( After completed meal ) How much ?
    ▪ Master:Fee is 16 Mon.
    ▪ Guest:OK. But I have only change, please count one by one.
    ▪ Master:OK. 1,2,3,4,5,6,7,8,,,
    ▪ Guest:Hey, by the way, what time is it now ?
    ▪ Master:Yeah, it is 9 .
    ▪ Guest:Oh, it’s 9. Thanks, and go ahead.
    ▪ Master:10,11,12,13,14,15,16…
    ▪ Master:Just 16 mon. Thanks you very much.
    ▪ Guest:Bye.
    ▪ Master:(Counting money again)Oh ! 1 mon is short !
    Master
    Guest

    View Slide

  7. Master
    Guest
    Fee is 16 Mon.
    1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
    1 2 3 4 5 6 7 8 9 10 11 12 13 14 15

    View Slide

  8. Fee is 16 Mon.
    9 10 11 12 13 14 15 16
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    Master
    Guest

    View Slide

  9. Fee is 16 Mon.
    9 10 11 12 13 14 15 16
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    What time
    is it now ?
    Master
    Guest

    View Slide

  10. Fee is 16 Mon.
    10 11 12 13 14 15 16
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    What time
    is it now ?
    It is 9 .
    Master
    Guest

    View Slide

  11. Fee is 16 Mon.
    1 2 3 4 5 6 7 8 9
    It is 9.
    Thanks, and
    go ahead. 9 10 11 12 13 14 15
    10 11 12 13 14 15 16
    Master
    Guest

    View Slide

  12. Fee is 16 Mon.
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    9 10 11 12 13 14 15 16
    It is 9.
    Thanks, and
    go ahead.
    Master
    Guest

    View Slide

  13. Fee is 16 Mon.
    1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
    Verify the price…
    Master
    Guest

    View Slide

  14. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
    Completely
    match !
    Master
    Guest
    Fee is 16 Mon. Verify the price…

    View Slide

  15. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
    Completely
    match !
    Master
    Guest
    Just the amount .
    Fee is 16 Mon. Verify the price…

    View Slide

  16. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
    Completely
    match !
    Master
    Guest
    Just the amount .
    Bye!
    Verify the price…
    Fee is 16 Mon.

    View Slide

  17. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
    Oh! 1 Mon is short !!
    (Counting money again…)
    Master
    Guest is gone .

    View Slide

  18. W H Y ?
    Master

    View Slide


  19. Fee is 16 Mon.
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    9 10 11 12 13 14 15 16
    Master
    Guest

    View Slide


  20. Gue
    st
    Fee is 16 Mon.
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    9 10 11 12 13 14 15 16
    Inadequate variables for storing values.
    (Only one variables count money and time.)
    Master

    View Slide


  21. Master
    Guest
    Fee is 16 Mon.
    10 11 12 13 14 15 16
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    What time
    is it now ?
    It is 9 .

    View Slide


  22. Master
    Guest
    Fee is16 Mon.
    10 11 12 13 14 15 16
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    What time
    is it now ?
    It is 9 .
    Interruption enabled
    (While counting, another process can forcefully run.)

    View Slide

  23. Master
    What should
    I do ?

    View Slide


  24. Master
    Guest
    Fee is 16 Mon.
    10 11 12 13 14 15 16
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    What time
    is it now ?
    9
    Currency
    Time

    View Slide


  25. 10 11 12 13 14 15 16
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    What time
    is it now ?
    It is 9 .
    9
    Master
    Guest
    Fee is 16 Mon.
    Currency
    Time

    View Slide


  26. 10 11 12 13 14 15 16
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    It is 9 .
    It is 9.
    Thanks, and
    go ahead.
    9
    Master
    Guest
    Fee is 16 Mon.
    Currency
    Time

    View Slide


  27. 10 11 12 13 14 15
    16
    1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
    It is 9 .
    It is 9.
    Thanks, and
    go ahead.
    9
    Master
    Guest
    Fee is 16 Mon.
    Currency
    Time

    View Slide


  28. 10 11 12 13 14 15
    16
    1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
    9
    1 Mon is short !
    Master
    Guest
    Fee is 16 Mon.
    Currency
    Time

    View Slide


  29. Gue
    st
    10 11 12 13 14 15
    16
    1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
    9
    1 Mon is short !
    Inadequate variables for storing values.

    Distinguishing between
    Currency and Time variables
    Master Fee is 16 Mon.
    Currency
    Time

    View Slide


  30. Fee is 16 Mon.
    10 11 12 13 14 15 16
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    What time
    is it now ?
    Master
    Guest

    View Slide


  31. Fee is 16 Mon.
    10 11 12 13 14 15 16
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    What time
    is it now ?
    Now I am counting !
    Please be quiet !
    Master
    Guest

    View Slide


  32. Gue
    st
    Fee is 16 Mon.
    10 11 12 13 14 15 16
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    What time
    is it now ?
    Interruption disabled.
    Now I am counting !
    Please be quiet !
    Master

    View Slide


  33. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
    1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
    Fee is 16 Mon.
    Master
    Guest

    View Slide


  34. 1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15 16
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    Fee is 16 Mon.
    Master
    Guest

    View Slide


  35. 1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15 16
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    Fee is 16 Mon.
    What time
    is it now ?
    Master
    Guest

    View Slide


  36. 1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15 16
    1 2 3 4 5 6 7 8
    9 10 11 12 13 14 15
    What time
    is it now ?
    Please put money !
    Master
    Guest

    View Slide


  37. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
    16
    1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
    Not enough money!
    Master
    Guest

    View Slide


  38. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
    16
    1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
    CAUTION !
    Master
    Guest

    View Slide


  39. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
    16
    1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
    CAUTION !
    Master
    Arrest

    View Slide


  40. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
    16
    1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
    CAUTION !
    Automation
    Master
    Arrest

    View Slide

  41. We call it Exploit to misuse the vulnerability in the
    system.

    View Slide

  42. We call it Exploit to misuse the vulnerability in the
    system.
    We shouldn’t to show or overcome the weaknesses.
    And don't forget the other change.

    View Slide

  43. We call it Exploit to misuse the vulnerability in the
    system.
    We shouldn’t to show or overcome the weaknesses.
    And don't forget the other change.
    You need to patch the system's vulnerability as if
    you patch the torn clothes.

    View Slide

  44. We call it Exploit to misuse the vulnerability in the
    system.
    We shouldn’t to show or overcome the weaknesses.
    And don't forget the other change.
    Getting the OS ready.
    Don’t turn off your computer.
    You need to patch the system's vulnerability as if
    you patch the torn clothes.

    View Slide

  45. We call it Exploit to misuse the vulnerability in the
    system.
    We shouldn’t to show or overcome the weaknesses.
    And don't forget the other change.
    We couldn’t complete the updates.
    Undoing changes.
    Don’t turn off your computer.
    You need to patch the system's vulnerability as if
    you patche the rotn clothes.

    View Slide