Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Multimedia Security Topics

Shumpei Urabe
June 23, 2021
Technology
0
890

Multimedia Security Topics

OWASP Sendai #48
https://owaspsendai.connpass.com/event/213819/

Shumpei Urabe

June 23, 2021
Tweet

More Decks by Shumpei Urabe

See All by Shumpei Urabe
動画配信技術について
yaminoma
0
480
コロナ禍でのライブストリーミングの変化とテレビ放送の規格について
yaminoma
0
610
今日から分かる Android Audioの全て
yaminoma
0
210
Apple Low-Latency HLSを使った 超低遅延配信について
yaminoma
3
2.4k
今日から分かる AVAudioEngineの全て
yaminoma
4
3.8k
Cross Platform Video Player
yaminoma
0
260
PHPとRustを組み合わせて音声ファイルをエンコードする話
yaminoma
0
1.9k
Androidでスクリーン配信をする技術
yaminoma
0
290
字幕のはなし
yaminoma
4
1.2k

Other Decks in Technology

See All in Technology
IoT から見る AWS re:invent 2022 ― AWSのIoTの歴史を添えて/Point of view the AWS re:invent 2022 with IoT - with a history of IoT in AWS
ma2shita
0
270
Oracle Transaction Manager for Microservices Free 22.3 製品概要
oracle4engineer
PRO
5
110
Raspberry Pi Camera 3 介紹
piepie_tw
PRO
0
160
マイクロサービス宣言から8年 振り返りとこれから / Eight Years After the Microservices Declaration A Look Back and A Look Ahead
eisuke
2
170
CES_2023_FleetWise_demo.pdf
sparkgene
0
120
Multi-Cloud Gatewayでデータを統治せよ！/ Data Federation with MCG
tutsunom
1
310
JAWS-UG 横浜 #54 資料
takakuni
0
210
もし本番ネットワークをまるごと仮想環境に”コピー”できたらうれしいですか? / janog51
corestate55
0
380
初めてのデータ移行プロジェクトから得た学び
tjmtmmnk
0
370
cdk deployに必要な権限ってなんだ？
kinyok
0
180
AI Services 概要 / AI Services overview
oracle4engineer
PRO
0
170
OCI技術資料 : ロード・バランサー 詳細 / Load Balancer 200
ocise
2
7.2k

Featured

See All Featured
Optimizing for Happiness
mojombo
365
64k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
morganepeng
109
16k
Infographics Made Easy
chrislema
235
17k
Build The Right Thing And Hit Your Dates
maggiecrowley
22
1.4k
Side Projects
sachag
451
37k
From Idea to $5000 a Month in 5 Months
shpigford
374
44k
Agile that works and the tools we love
rasmusluckow
320
20k
4 Signs Your Business is Dying
shpigford
171
20k
Designing Dashboards & Data Visualisations in Web Apps
destraynor
224
50k
Keith and Marios Guide to Fast Websites
keithpitt
407
21k
Helping Users Find Their Own Way: Creating Modern Search Experiences
danielanewman
10
1.3k
Making the Leap to Tech Lead
cromwellryan
117
7.7k

Transcript

  1. Multimedia Security Topics Speaker: Shumpei Urabe(NAXA, Inc.) OWASP Sendai #48

  2. Speaker Bio 4IVNQFJ6SBCF $&01SFTJEFOUPG/"9" *OD 'PVOEFSPG'VLVPLB7JEFP5FDI .VMUJNFEJB3FTFBSDIFS

  3. Today's 
 Outline "CPVU%3. $BUFHPSZPG%3. "CPVU5&& %FDSZQUPG%3. )BSEXBSF4FDVSJUZ *NQMFNFOU4FDVSJUZ4BOECPY VTJOH6OJLFSOFM

    $PODMVTJPO

  4. About DRM

  5. Live streaming that continues to be popular w 8JUIUIF$07*% XIBUJTDVSSFOUMZHBJOJOH

    NPNFOUVNJTPOMJOFTUSFBNJOH w /PXUIBUUIFHPWFSONFOUBOEQSFGFDUVSFTBSF GPSDJOHVTUPHPXJUIPVUBOBVEJFODF UIFPOMZXBZ UPEFMJWFSFOUFSUBJONFOUJTUISPVHIMJWFTUSFBNJOH w 4P CFIJOEUIFTDFOFTBTXFTQFBL UIFSFJTBMPUPG EJTUSJCVUJPOHPJOHPO w 5IFSFJTBDVSSFOUQSPCMFNXJUIUIJTUZQFPGPOMJOF TUSFBNJOH

  6. Video Thief

  7. No captures allowed w *UJTFBTZUPUBLFBTDSFFOTIPUPGUIFEFMJWFSZQBHF PS SFDPSECZEFTLUPQDBQUVSF BOEFWFOUVBMMZSFDPSEUIF NPOJUPSXJUIBTNBSUQIPOFDBNFSB"OEJUJTJNQPTTJCMF UPTUPQUIFNDPNQMFUFMZ

    w *GZPVXBOUUPTUPQUIFNDPNQMFUFMZ ZPVXJMMIBWFUP USBDLUIFJSNPVTFBOELFZCPBSE MJLFJO$#5FYBNT BOE ZPVXJMMBMTPIBWFUPXFBSBXFCDBNUPNPOJUPSUIFN  CVUZPVEPOUXBOUUPHPUISPVHIUIBUNVDIUSPVCMF XIFOZPVBSFFOKPZJOHXBUDIJOHUIFN SJHIU  w "TZPVDBOTFF JUJTOPUQPTTJCMFUPQSFWFOUJU DPNQMFUFMZ CVUJUJTQPTTJCMFUPNBLFJUJNQPTTJCMF XJUIPVUVTJOHBWFSZEJG fi DVMUNFUIPE

  8. It is DRM.

  9. Digital Rights Management w %3.JTBOBDSPOZNGPS%JHJUBM3JHIUT.BOBHFNFOU w %3.JTBNFDIBOJTNUIBUVTFTTPGUXBSFDPOUSPMUPQSPUFDUDPOUFOU BOE%3.JUTFMGJTOPUBUFDIOPMPHZ w 5IFSFJTBMTPBDPQZHVBSE

    ""$4 GPS%7%TBOE#MVSBZTUIBUJTTJNJMBS CVUJOBCSPBEFSTFOTF JUDBO CFTBJEUPCFBGPSNPG%3. w 5IFIJTUPSZPG%3.JTRVJUFPME XJUIDPODFQUVBMQSPQPTBMTBTFBSMZBTUIFT w 0ODFVQPOBUJNF XIFO fl BTINFNPSZBOEIBSEEJTLTXFSFOPUBWBJMBCMF NBHOFUJDUBQFTXFSFVTFEGPS SFDPSEJOH w )PXFWFS NBHOFUJDUBQFTDPVMECFFBTJMZEVQMJDBUFE BOEUIJTMFEUPSBNQBOUEVQMJDBUJPO NBLJOHJU EJG fi DVMUGPSEFWFMPQFSTUPSFDPWFSUIFJSEFWFMPQNFOUDPTUTFWFOBGUFSNBLJOHIVHFJOWFTUNFOUT w 5IFDPODFQUPG%3.XBTCPSOUPQSFWFOUUIJTGSPNIBQQFOJOH*OUIFT UIFJEFBPGFODSZQUJOHBOE QSPUFDUJOHDPOUFOUUISPVHITPGUXBSFDPOUSPMXBTQSPQPTFE w 5IJTJTXIFSFUIFIJTUPSZPG%3.CFHBO

  10. Category of DRM

  11. There are many types of DRM w 5PEBZ UIFTUSFBNJOHNFUIPEJTUIFNBJOTUSFBNNFUIPE GPSEJTUSJCVUJOHWJEFPBOEBVEJP

    BOEXJUIUIFTQSFBEPG $%/T UIFTUSFBNJOHNFUIPEJTCFJOHVTFEJOTUFBEPG EPXOMPBEJOHBTJOHMF fi MFBTJUJT TFOEJOHJUJOTNBMM QJFDFTUPGBDJMJUBUFNPSF fl FYJCMFDBDIFDPOUSPM w 0OFPGUIFBEWBOUBHFTPGUIFTUSFBNJOHNFUIPEJTUIBU UIFDMJFOUPOMZOFFETUPBDRVJSFUIFOFDFTTBSZEBUB TP UIFSFJTOPOFFEUPBDRVJSFFWFSZUIJOH5IJTNBLFTUIF BDRVJTJUJPOBOEQMBZCBDLQSPDFTTGBTUFS BOEBMTP FMJNJOBUFTUIF fl PXPGVOOFDFTTBSZUSBG fi D XIJDIIBT NBOZBEWBOUBHFTGPSCPUIUIFEFMJWFSZTJEFBOEUIF WJFXJOHTJEF

  12. HLS and MPEG-DASH w *OUIFXPSMEPGNVMUJNFEJB UIFSFBSFUXPTUSFBNJOH NFUIPET)551-JWF4USFBNJOH DPNNPOMZLOPXOBT)-4  XIJDIJTCBTFEPO)551BOEEFWFMPQFECZ"QQMF

    BOE .1&(%"4) BMTPCBTFEPO)551BOEEFWFMPQFECZ .1&( w *OHFOFSBM CPUIBSFVTFE CVU)-4JTNPSFDPNNPOMZ VTFEUIFTFEBZTNVJTBNBOJGFTU fi MFUIBUDPOUBJOT EFUBJMFEWJEFPEBUB BOEUIFQMBZFSGFUDIFTJUUPQMBZUIF WJEFP w 5IFSFBSFTFWFSBMUZQFTPGFODSZQUJPONFUIPETGPSUIJT )-4BOE%"4)

  13. HLS-AES w )-4"&4FODSZQUT)-4TFHNFOUTXJUI"&4 w 5IFLFZJOGPSNBUJPOJTDPOUBJOFEJOUIFNBOJGFTU BOE XIFOQMBZJOHUIFWJEFP UIFQMBZFSSFUSJFWFTUIFLFZ GSPNUIFLFZJOGPSNBUJPOBOEEFDSZQUTUIFTFHNFOUGPS QMBZCBDL

    w 5IFBEWBOUBHFPGUIJTJTUIBUFWFOJGZPVEPXOMPBEUIF )-4TFHNFOUBTJUJT ZPVXJMMOPUCFBCMFUPQMBZJUPO QMBZFSTTVDIBT7-$ w 5IFEJTBEWBOUBHF IPXFWFS JTUIBUUIFLFZJTWFSZFBTZ UPPCUBJO*OGBDU UIFLFZJOGPSNBUJPOJTXSJUUFOJOUIF NBOJGFTU CVUJUJTFBTZUPPCUBJOUIFLFZGSPNIFSF BOE JUDBOCFFBTJMZPCUBJOFEBOEEFDSZQUFE

  14. FairPlay w 'BJS1MBZIBTCFFOBSPVOEGPSBMPOHUJNF BOEFWFOUIF TPOHT*QVSDIBTFEPOJ5VOFTVTFEUPIBWFUIFJSBVEJP fi MFTQSPUFDUFECZ'BJS1MBZ BOEUIF*1" J04BQQMJDBUJPO FYFDVUBCMF

    EJTUSJCVUFEJOUIF"QQ4UPSFXBTBMTP QSPUFDUFECZ'BJS1MBZ w 0OFPGUIFNBJOGFBUVSFTPG'BJS1MBZJTUIBUJUJT JOUFHSBUFEJOUPUIFPQFSBUJOHTZTUFN TPUIBUUIF%3. NFDIBOJTNDBOCFJOUFHSBUFEJOUPUIFPQFSBUJOHTZTUFN UPQSFWFOUDBQUVSJOHBOENPEJ fi DBUJPOGSPNPVUTJEF w 5IFBQQMJDBUJPOPG'BJS1MBZUP)-4JT'BJS1MBZ4USFBNJOH 'BJS1MBZ4USFBNJOHPOMZTVQQPSUT)-4PS$."'

  15. Widevine w 'PMMPXJOH"QQMFTMFBE (PPHMFEFWFMPQFEBQSPUFDUJPO TZTUFNDBMMFE8JEFWJOF XIJDITVQQPSUT)-4 .1&( %"4) BOE$."' w

    8JEFWJOFJTB%3.TZTUFNPSJHJOBMMZQSPWJEFECZB DPNQBOZDBMMFE8JEFWJOF5FDIOPMPHJFT XIJDIXBT BDRVJSFECZ(PPHMFJO*UJTOPXVOEFSUIF "MQIBCFUVNCSFMMB w *UJTOPFYBHHFSBUJPOUPTBZUIBU8JEFWJOFJTUIFNPTU VTFE%3.JOUIFXPSME w 5PEBZ XJUIUIFXJEFTQSFBEVTFPG(PPHMF$ISPNFBOE UIFQPQVMBSJUZPG"OESPJETNBSUQIPOFT 8JEFWJOFJT CFJOHVTFEPOBXJEFWBSJFUZPGEFWJDFT

  16. Security Level of Widevine w 0OFPGUIFVOJRVFGFBUVSFTPG8JEFWJOFJTBDPODFQUDBMMFETFDVSJUZMFWFM5IJTTFDVSJUZMFWFMJTBTTJHOFE CBTFEPOIPXXFMMUIFQMBZCBDLEFWJDFNFFUTUIFTFDVSJUZSFRVJSFNFOUT w 5IJTTFDVSJUZMFWFMJTEFUFSNJOFEBUUIFIBSEXBSFMFWFM BOEWJFXJOHJTSFTUSJDUFECZUIFTFDVSJUZMFWFM

    w 5IFSFBSFUISFFMFWFMTPGTFDVSJUZ XJUIMFWFMCFJOHUIFTUSPOHFTU5IFOFYUTUSPOHFTUJTMFWFM  GPMMPXFECZMFWFM BOEUIFMPXFTUJTMFWFM

  17. Security Level of Widevine w "UMFWFM BMMDPOUFOUQSPDFTTJOH FODSZQUJPOBOEDPOUSPMNVTUCFQFSGPSNFEJOUIF4P$TUSVTUFE FYFDVUJPOFOWJSPONFOU UIJTJTDBMMFE5&&

    UPQSFWFOUFYUFSOBMUBNQFSJOHPSDPQZJOHPGNFEJB fi MFT'PS FYBNQMF JOUIFDBTFPG"3.QSPDFTTPST UIFSFJTBGVODUJPODBMMFE5SVTU;POF XIJDIJTB5&& w *OMFWFM UIFDPOUFOUFODSZQUJPOJUTFMGJTEPOFCZ5&& CVUUIFQMBZCBDLQSPDFTTJTOPUQFSGPSNFECZ 5&& w -FWFMBQQMJFTXIFOUIFEFWJDFEPFTOPUIBWF5&& PSXIFOJUJTQSPDFTTFEPVUTJEFUIFEFWJDF)PXFWFS  FWFOBU-FWFM JUJTOFDFTTBSZUPUBLFBQQSPQSJBUFNFBTVSFTBHBJOTUFODSZQUJPO

  18. Security Level of Widevine w 5IJTJTUIFTFDVSJUZMFWFM*GZPVEPOPUNFFUMFWFM ZPVXJMMOPUCFBCMFUPQMBZ)%PSIJHIFSRVBMJUZ*O BEEJUJPO FWFOJGUIFEFWJDFNFFUTMFWFM ZPVDBOEFDJEFXIFUIFSUPQMBZJUPSOPUPOUIFBQQMJDBUJPO

    TP ZPVNBZOPUCFBCMFUPQMBZDFSUBJOEFWJDFTVTJOHUIFCMBDLMJTUNFUIPE5IFSFBTPOGPSUIJTCMBDLMJTUJOH NFUIPEJTUIBUFWFOJGUIFBVUIFOUJDBUJPOQBTTFT 8JEFWJOFEPFTOPUHVBSBOUFFUIBUUIFEFWJDFJT DPNQMFUFMZTBGF TPUIFSFBSFDBTFTXIFSFTPNFEFWJDFTPG$IJOFTFQSPEVDUTBSFSFKFDUFE w "MTP ZPVNBZUIJOLUIBUJUJTRVJUFEJG fi DVMUGPSEFWJDFNBOVGBDUVSFSTUPPCUBJO8JEFWJOF CVUBMUIPVHI UIFSFJTBDFSUBJOBNPVOUPGUFEJPVTQSPDFTT 8JEFWJOFJUTFMGDBOCFPCUBJOFEGPSGSFF TPNBOVGBDUVSFST XIPEPOPUPCUBJO8JEFWJOFBSFMJLFMZUPIBWFTPNFTPSUPGQSPCMFN w 5IJT8JEFWJOF CVUVOMJLF"QQMF'BJS1MBZ 8JEFWJOFJUTFMGJTOPUDPNQMFUFMZJOUFHSBUFEJOUPUIF04 BOEJO UIFDBTFPG8JEFWJOFMFWFM 4%RVBMJUZDPOUFOUDBOCFQMBZFE TPJUJTOPUDPNQMFUFMZQSPUFDUFE5IJTJTB CJHEJGGFSFODF

  19. PlayReady w 1MBZ3FBEZ EFWFMPQFECZ.JDSPTPGU TVQQPSUT)-4BOE .1&(%"4) $."' BTXFMMBT8JEFWJOF BOE.JDSPTPGUT PXOGPSNBU

    .JDSPTPGU4NPPUI4USFBNJOH w 1MBZ3FBEZXBTJOUSPEVDFEJOBOEXBTDSFBUFEUP QSPUFDU8.7 8JOEPXT.FEJB7JEFP BOE8." 8JOEPXT .FEJB"VEJP  w 1MBZ3FBEZ MJLF'BJS1MBZ JTJOUFHSBUFEJOUPUIF04BOEJT UIFSFGPSFTFDVSF*UDBOBMTPCFQSFWFOUFEXJUISFTQFDU UPDBQUVSJOH FUD

  20. OPL of PlayReady w 1MBZ3FBEZ MJLF8JEFWJOF IBTUXPTFDVSJUZMFWFMT UIF fi STUPOFJTDBMMFE01-

    0VUQVU1SPUFDUJPO-FWFMT  w 5IF fi STUJTDBMMFE01- 0VUQVU1SPUFDUJPO-FWFMT "DDPSEJOHUP.JDSPTPGUTEPDVNFOUBUJPO UIFSFBSF FJHIU01-MFWFMT       BOE XJUICFJOHUIFIJHIFTUBOE CFJOHUIFMPXFTU w 5IF01-JT fi OFMZDPOUSPMMFECZUIFPVUQVUEFTUJOBUJPOPGUIFEFWJDF'PSFYBNQMF XIFOQMBZJOHDPOUFOU POBEJTQMBZUIBUEPFTOPUTVQQPSU)%$1 JUXJMMCF01-PSMBUFS BOE)%QMBZCBDLXJMMOPUCF QPTTJCMF

  21. SL of PlayReady w 4FDPOEMZ UIFSFJTBTFDVSJUZMFWFMDBMMFE4-UIFSFBSFUISFFUZQFTPG4-4- 4- BOE4- w 5IFSFBSFUISFF4-T4-

    4- BOE4-4-JTUIFMPXFTUTFDVSJUZMFWFMJO1MBZ3FBEZ4- JTUIFMPXFTUTFDVSJUZMFWFMJO1MBZ3FBEZBOETIPVMEOPUCFVTFEGPSBOZUIJOHPUIFSUIBOEFCVHHJOH w 4-JTBTPGUXBSFPOMZWFSTJPOPG%3. w 5IF4-IBOEMFT%3.JOBTFDVSFFYFDVUJPOFOWJSPONFOUTVDIBT5FF w 3FDFOUMZ UIFSFBSFNPSFBOENPSFTFSWJDFTUIBUSFRVJSF4-UPCFBCMFUPQMBZCBDL)%PSIJHIFS RVBMJUZDPOUFOU

  22. About TEE

  23. Trusted Execution Environment w "UUIFTFDVSJUZMFWFM MFUTEJWFBMJUUMFEFFQFSJOUP5&&  XIJDITUBOETGPS5SVTUFE&YFDVUJPO&OWJSPONFOU B GFBUVSFUIBUBMMPXTDSJUJDBMPQFSBUJPOTUPCFFYFDVUFE

    TBGFMZBOEJOEFQFOEFOUMZPGUIF04 w 5&&IBTCFFOJODMVEFEJOSFDFOU$16T UIFNPTUGBNPVT CFJOH*OUFM4(9 ".%4&7 BOE"3.5SVTU;POF w 5&&POMZQSPWJEFTRVBSBOUJOFFYFDVUJPO BOEUIF QMBUGPSNVTJOH5&&NVTUCFBCMFUPTFDVSFMZIPME TFOTJUJWFJOGPSNBUJPOBOEFOTVSFTBGFUZXIFOFYFDVUJOH 5&&

  24. Trusted Execution Environment w 5&&JTBOJTPMBUFEFYFDVUJPOFOWJSPONFOU CVUUIFSFBSF TFWFSBMPUIFSJTPMBUFEFYFDVUJPOGVODUJPOTCFTJEFT5&& 5IFTFBSFDBMMFE)BSEXBSF*TPMBUFE&YFDVUJPO&OWJSPONFOU )&& 

    w 5&&JTBUZQFPG)&& CVUUIF5SVTUFE1MBUGPSN.PEVMF 51. SVOTPOBTFQBSBUFDIJQUIBUJTDPNQMFUFMZ JOEFQFOEFOUPGUIF$16 w *OUIFDBTFPG51. JUQSPWJEFTLFZHFOFSBUJPO DPO fi EFOUJBM JOGPSNBUJPOTUPSBHF SBOEPNOVNCFSHFOFSBUJPO FUD BOE XPSLTXJUIGVODUJPOTTVDIBT5SVTUFE#PPUBOE#JU-PDLFS w 5&&SVOTJUTPXOPQFSBUJOHTZTUFN DBMMFE5SVTUFE04 PO XIJDIUIF5SVTUFE"QQMJDBUJPO 5" SVOT

  25. ARM TrustZone w "3.5SVTU;POFJTUIFNPTUXJEFMZVTFE5&&BOEJTVUJMJ[FE JOTNBSUQIPOFTBTXFMMBTHBNJOHEFWJDFTTVDIBTUIF /JOUFOEP4XJUDI w 5SVTU;POFIBTBMPOHIJTUPSZ IBWJOHCFFOJOUSPEVDFEJO "3.W,JO

    BOEDSFBUFTBTJOHMFJTPMBUFEFYFDVUJPO FOWJSPONFOUBUCPPUUJNF w *OUIF$PSUFY"BSDIJUFDUVSF XIJDIJTUIFNPTUVTFE 5SVTU;POFUPEBZ BMMQSJWJMFHFTBSFBWBJMBCMFJOUIF5SVTUFE 048IFOBDDFTTFECZUIFPSJHJOBM04 4FDVSF.POJUPS$BMM 4.$ JOTUSVDUJPOTBSFVTFEUPDPNNVOJDBUFXJUIJU w .BOZPGUIFGFBUVSFTPG"3.5SVTU;POFBSFJNQMFNFOUFE CZTPGUXBSF

  26. Intel SGX w *OUFM4(9 4PGUXBSF(VBSE&YFDVUJPO JTBOJTPMBUFE FYFDVUJPOGFBUVSFJOUSPEVDFEJO4LZMBLFBOEMBUFS w 8JUI4(9 UIFPOMZQSJWJMFHFBWBJMBCMFUPUIFVTFSJTUIF

    VTFSMFWFM3JOHJOUIFFYFDVUJPOFOWJSPONFOU DBMMFE &ODMBWF BOEOPUBMMQSJWJMFHFTBSFBWBJMBCMF w "MTP &ODMBWFDBOPOMZVTFBNBYJNVNPG.#PG NFNPSZTQBDF

  27. AMD SEV w ".%4&7 4FDVSF&ODSZQUFE7JSUVBMJ[BUJPO JTBOJTPMBUFE FYFDVUJPOFOWJSPONFOUJOUSPEVDFEJOUIF&1:$TFSJFT4&7 JTBWJSUVBMJ[BUJPOBXBSF5&&JOUFOEFEGPSVTFJOWJSUVBM NBDIJOFTJOUIFDMPVE w

    4&7JTBWJSUVBMJ[BUJPOBXBSF5&&UIBUJTJOUFOEFEUPCF VTFEJOWJSUVBMNBDIJOFTJOUIFDMPVE0OFPGUIFNBJO GFBUVSFTPG4&7JTUIBUJUEPFTOPUQSFQBSFBEFEJDBUFE NFNPSZBSFBGPSUIF5&& CVULFFQTUIF7.FYFDVUJPO JUTFMGTFDSFU w *OPUIFSXPSET CZNBOBHJOHUIFFODSZQUJPOPGUIF7.T NFNPSZBOEWJSUVBMEJTLT UIFIZQFSWJTPSDBOOPUQFFLBUJU w 4PGUXBSFUIBUVTFT4&7JODMVEFT3FEIBUT&OBSY

  28. TEE Case Studies w 5&&JTBMTPVTFEGPSLFZNBOBHFNFOUJOUIF%3.XFUBMLFEBCPVUFBSMJFSJO"OESPJE UIFSFJTBLFZ NBOBHFNFOUNFDIBOJTNDBMMFE,FZNBTUFS XIJDIJTJNQMFNFOUFEPOUIFQSFNJTFPG"3.5SVTU;POF w *OJ04

    TJNJMBSUP"3.5SVTU;POF UIFSFJTBTFDVSJUZQSPDFTTPSDBMMFE4FDVSF&ODMBWF XIJDIJTJOUIF"QQMF 5DIJQ w 4FDVSF&ODMBWFNBOBHFTEBUBGPS5PVDI*%BOE'BDF*% EJTLFODSZQUJPOXJUI'JMF7BVMU BOE'BJS1MBZLFZ NBOBHFNFOU5IJT4FDVSF&ODMBWFJTOPUBDDFTTJCMFGSPNUIFBQQBUBMMBOEJTVQEBUFEXJUIUIFJ04WFSTJPO

  29. Vulnerability of TEE w 5&&JTBOJTPMBUFEFYFDVUJPOGVODUJPOJOUIF$16 CVUTJODFJUEPFTOPUQIZTJDBMMZBMMPDBUFDPSFT JUJTTBJEUP IBWFNBOZWVMOFSBCJMJUJFT w 'PSFYBNQMF

    1SJNF 1SPCF XIJDIFYQMPJUTDBDIFTIBSJOH JTLOPXOUPCFFGGFDUJWFPO*OUFM4(9 BOEBO BUUBDLDBMMFE'PSF4IBEPXDBOCFDBSSJFEPVUCZDPNCJOJOHDBDIFTIBSJOHBOETQFDVMBUJWFFYFDVUJPO KVTU MJLF4QFDUSF XIJDIXBTBIJHIMZQVCMJDJ[FE$16WVMOFSBCJMJUZ w "MTP 5&&JTOPUSFTJTUBOUUP4JEF$IBOOFMBUUBDLT"TZPVDBOTFF 5&&BMTPIBTWVMOFSBCJMJUJFT BOEJUJT JNQPSUBOUUPXPSLXJUI3PPUPG5SVTUUPSFEVDFUIFSJTLBTNVDIBTQPTTJCMF

  30. Decrypt of DRM

  31. About Common-key Cryptography w %3.VTFTTZNNFUSJDLFZDSZQUPHSBQIZ XIFSFUIFLFZTVTFEGPSFODSZQUJPOBOEEFDSZQUJPOBSFUIFTBNF 4JODFTZNNFUSJDLFZDSZQUPHSBQIZDBOCFFBTJMZEFDSZQUFEJGUIFLFZJTMFBLFE JUJTJNQPSUBOUUPEJTUSJCVUF UIFLFZXJUIPVUMFBLJOHJU w

    *OBEEJUJPO QSPDFTTJOHTQFFEJTBLFZGBDUPSGPSTZNNFUSJDLFZDSZQUPHSBQIZ w 5IFSFBSFUXPUZQFTPGTZNNFUSJDLFZDJQIFSTCMPDLDJQIFSTBOETUSFBNDJQIFST

  32. Block Cipher w #MPDLDJQIFSJTBNFUIPEPGFODSZQUJOHQMBJOUFYUCZHSPVQJOHJUJOUPTFWFSBMCMPDLTPGBDFSUBJOTJ[F CMPDLT  5IFDJQIFSUFYUJTUIFTBNFTJ[FBTUIFQMBJOUFYU w 5PFODSZQUQMBJOUFYUUIBUJTMBSHFSUIBOUIFCMPDLTJ[F XFVTFXIBUJTDBMMFEFODSZQUJPONPEF

    w 4JODFCMPDLDJQIFSTBSFQSPDFTTFECZTFQBSBUJOHUIFN UIFQSPDFTTJOHMPBEJTOPUMBSHF w "TBUZQJDBMFYBNQMF "&4DJQIFSTBSFUIFNPTUDPNNPO

  33. Stream Cipher w *ODPOUSBTUUPCMPDLDJQIFST TUSFBNDJQIFSTBSFDSZQUPHSBQIJDNFUIPETUIBUTFRVFOUJBMMZQSPDFTTQMBJOUFYUJO TNBMMVOJUT w 5IFGFBUVSFPGTUSFBNDJQIFSTJTUIBUUIFZQFSGPSNFODSZQUJPOBOEEFDSZQUJPOCZUBLJOHUIFFYDMVTJWFMPHJDBM 03 903

    PGUIFQMBJOUFYUBOEUIFLFZ w $PNQBSFEUPCMPDLDJQIFST TUSFBNDJQIFSTBSFGBTUFSCVUMFTTFG fi DJFOUCFDBVTFUIFZBSFQSPDFTTFEJOTNBMMFS VOJUT TPUIFSFBSFBEWBOUBHFTBOEEJTBEWBOUBHFT w 4USFBNDJQIFSTBSFVTFEGPSFODSZQUJPOJOXJSFMFTT-"/T w 5IFTFUXPNFUIPETDBOCFVTFEUPFODSZQUTZNNFUSJDLFZDJQIFST CVUJGUIFPVUQVUSFTVMUJTUIFTBNFFBDI UJNF UIFSFJTBSJTLPGCFJOHHVFTTFEGSPNUIFSF

  34. IV w 5PQSFWFOUUIJT BO*7 *OJUJBMJ[BUJPO7FDUPS JTVTFE XIJDIJTBSBOEPNTFRVFODFPGCJUTJOTFSUFEJOCFUXFFO UPNBLFUIFEBUBIBSEFSUPEFDJQIFS DIBOHJOHUIFPVUQVUSFTVMUFBDIUJNFUPQSFWFOUHVFTTJOH w

    *OUIFDBTFPGCMPDLDJQIFST UIF*7SFGFSTUPUIFQMBJOUFYUBOEUIFQSFWJPVTFODSZQUFECMPDL BOEUIFSFTVMU PGUIF903CFDPNFTUIFDJQIFSUFYUPGUIFOFYUCMPDL5IF*7JTVTFEXIFOFODSZQUJOHGPSUIF fi STUUJNF w *OUIFDBTFPGTUSFBNDJQIFST BQTFVEPSBOEPNOVNCFSHFOFSBUPS 4FFE JTVTFEUPDSFBUFUIFDJQIFSUFYU  BOE*7JTVTFEUPFMJNJOBUFUIFCJBTPGUIF4FFE w 5IJTJTIPXTZNNFUSJDLFZDSZQUPHSBQIZXPSLT BOEUIFSFBSFTFWFSBMUZQFTPG%3.UIBUVTFUIJTNFDIBOJTN GPSFODSZQUJPO

  35. CBR w 'JSTUPGBMM MFUTUBMLBCPVU$#$ $JQIFS#MPDL$IBJOJOH XIJDIJTBCMPDLDJQIFSTDIFNFUIBU fi STU903TXJUI *7 UIFO903TUIFQSFWJPVTDJQIFSCMPDLXJUIUIFQMBJOUFYUCMPDL

    BOETPPOVOUJMUIFFOE w 4JODF$#$JTCBTFEPOUIFQSFWJPVTCMPDL QBSBMMFMQSPDFTTJOHJTOPUQPTTJCMF BOEJGUIFCMPDLTJ[FJTOPUNFU  UIFEBUBNVTUCF fi MMFEXJUIQBEEJOH

  36. CTR w /FYU MFUTUBMLBCPVU$53 $06/5FS XIJDIBMTPVTFTBCMPDLDJQIFS CVUQSFQBSFTBDPVOUFSUIBUJODSFNFOUT CZPOF FODSZQUTJU BOE903TUIFPVUQVUDJQIFSUFYUXJUIUIFQMBJOUFYUCMPDL5IJTBMMPXTUIFCMPDLDJQIFSUP

    CFUSFBUFEBTBTUSFBNDJQIFS BOETJODFOPQBEEJOHPSPUIFSQSPDFTTJOHJTSFRVJSFE JUIBTHPPEQFSGPSNBODF BOEDBOCFFYFDVUFEJOQBSBMMFM w $53VTFTBEJTQPTBCMFSBOEPNOVNCFSDBMMFEBOPODFBTBDPVOUFS XIJDIQSFWFOUTUIFSFTVMUGSPNCFJOH fi YFE

  37. AES-128 w 5IF fi STUPOFJT"&4"TUIFOBNFTVHHFTUT UIJTFODSZQUTXJUI"&4BOEVTFTFJUIFS$#$PS$53BT UIFFODSZQUJPONPEF5IJTJTTJNQMFBOEFBTZUPVOEFSTUBOE

  38. SAMPLE-AES w /FYU MFUTUBMLBCPVU4".1-&"&44".1-&"&4FODSZQUTOPUUIFFOUJSFEBUB CVUPOMZBQBSUPGJU XIJDI TQFFETVQUIFQSPDFTTJOHBOESFEVDFTUIFMPBE w 4".1-&"&4JTBMTPDBMMFE$#$4 XIJDIVTFT$#$GPSFODSZQUJPO

  39. MPEG-CENC w /FYU MFUTUBMLBCPVU.1&($&/$ $PNNPO&ODSZQUJPO4DIFNF XIJDIJTBDPNNPOFODSZQUJPOTDIFNF EFWFMPQFECZ.1&(.1&($&/$JTBDPNNPOFODSZQUJPONFUIPEEFWFMPQFECZ.1&(

  40. About FairPlay's Work f low

  41. About FairPlay's Work f low  5IFVTFSPQFOTUIFBQQBOETUBSUTQMBZJOHUIF'BJS1MBZ4USFBNJOHDPOUFOU  "7'PVOEBUJPOQSFQBSFTUPTUBSUQMBZCBDL 

    "7'PVOEBUJPOXJMMGFUDIUIF)-4NBOJGFTU fi MFGSPNUIFTQFDJ fi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

  42. About FairPlay Streaming's Crack w )PXFWFS UIFSFJTOPUIJOHUIBUDBOCFEPOFBHBJOTUBKBJMCSFBL BMUIPVHIJUJTQPTTJCMFUPPCUBJOUIFDPOUFOU LFZTTUPSFEJOTJEFUIFEFWJDFPODFSPPUQSJWJMFHFTBSFPCUBJOFE w

    *OBEEJUJPOUPKBJMCSFBLJOH UIFSFBSFTFWFSBMPUIFSNFUIPETB1P$DBMMFE1TZDIJD1BQFSSFMFBTFEJO.BZ BMMPXTVTFSTUPPCUBJODPOUFOULFZTGPSEFWJDFTSVOOJOHJ04PSMPXFS*UVTFTBWVMOFSBCJMJUZJO UIFDPEFOBNFBOEFYUSBDUTUIFDPOUFOULFZCZVTJOHBNFUIPEUIBUDIFDLTGPSBTQFDJ fi DFOUJUMFNFOU LFZ JO BQSPDFTTDBMMFE*05BTL)BT&OUJUMFNFOUJO9/6 %BSXJO,FSOFM )PXFWFS JUJTJNQPTTJCMFGPSNPTUVTFSTUPHFU UPUIJTQPJOU TPBTBEFWFMPQFSJNQMFNFOUJOH'BJS1MBZ4USFBNJOH ZPVDBOTBGFMZJHOPSFJU3FNFNCFS  IPXFWFS UIBUQFSGFDUJPOEPFTOPUFYJTU

  43. Widevine w 8JEFWJOFJTFODSZQUFEVTJOH.1&($&/$ XIJDISFRVJSFTUIFVTFPG"&4$53BTUIFFODSZQUJPOTDIFNF w 5IFSFBSFUXPUZQFTPG8JEFWJOF 8JEFWJOF$MBTTJDGPSMFHBDZEFWJDFTBOE8JEFWJOF.PEVMBSXIJDIJTDVSSFOUMZ JOVTF w *OPSEFSUPVOEFSTUBOE8JEFWJOF

    UIFSFBSFTPNFBEEJUJPOBMUIJOHTZPVOFFEUPLOPX

  44. CDM w 'JSTU MFUTUBMLBCPVU$%. XIJDITUBOETGPS$POUFOU%FDSZQU.PEVMF UIFNPEVMFUIBUIBOEMFT8JEFWJOF5IF $%.JTCVJMUJOUPFWFSZCSPXTFS CVUUIFTPVSDFDPEFJTOPUQVCMJD w #ZUIFXBZ

    JUJTFBTZUPDIFDLJGB$%.JTQSFTFOUPSOPU'PSFYBNQMF JO(PPHMF$ISPNF USZUZQJOHDISPNF DPNQPOFOUTJOUIFBEESFTTCBSBOEQSFTTFOUFS*GZPVTFF8JEFWJOF$POUFOU%FDSZQUJPO.PEVMFJOUIFMJTU  ZPVDBOCFTVSFUIBUJUJTUIFSF w *OBEEJUJPOUP(PPHMF$ISPNF BMMNBKPSCSPXTFSTTVDIBT.P[JMMB'JSFGPYBOE.JDSPTPGU&EHFIBWFUIJT$%. *ODJEFOUBMMZ JGZPVBSFVTJOH$ISPNJVN JUNBZOPUCFJODMVEFE w 5IFSPMFPGUIF$%.JTUPSFRVFTUBMJDFOTF TUPSFUIFEFDSZQUJPOLFZTBGFMZ QSFWFOUFYUFSOBMBDDFTTUPUIF EFDSZQUFEDPOUFOU PVUQVUUIFWJEFPUPBTFDVSFPVUQVUEFWJDF BOETPPO

  45. EME w 8FIBWFFYQMBJOFEUIBUUIF$%.JTSFTQPOTJCMFGPSUIFNBJOQSPDFTTJOHPG8JEFWJOF5IF$%.JTBDUVBMMZ VQEBUFEQFSJPEJDBMMZBOEDIBOHFTGSFRVFOUMZ#FDBVTFPGUIJT JUJTOPUWFSZQSBDUJDBMUPDBMMUIF$%.GSPNUIF QMBZFS w 5PEFBMXJUIUIJT UIFSFJTBOBCTUSBDUJPOMBZFSDBMMFE&ODSZQUFE.FEJB&YUFOTJPOT &.&

    XIJDIQSPWJEFTBO "1*GPSQMBZFSTUPDPNNVOJDBUFXJUI$%. TPUIBUQMBZFSTDBOJOUFSBDUXJUI$%.CZIJUUJOHUIF&.&"1*5IF DPOUFOUPGUIJT&.&JTB+BWB4DSJQU"1* w &.&JTB8$TUBOEBSE TPJUJTWFSZFBTZUPVTF

  46. About Widevine's Work f low

  47. About Widevine's Work f low  5IFVTFSPQFOTUIFBQQBOETUBSUTQMBZJOHUIF8JEFWJOFDPOUFOU5IFBQQGFUDIFTUIF.1&(%"4)NBOJGFTU fi MF BOEQBSTFTJU*UUIFOWFSJ

    fi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

  48. About Widevine's Crack w 0OFPGUIFNPTUXFMMLOPXOWVMOFSBCJMJUJFTJO8JEFWJOFJTUIF8JEFWJOF-FWFMWVMOFSBCJMJUZEJTDPWFSFEJO +BOVBSZ*UJTEVFUPBQSPCMFNJO8*EFWJOFT"&4JNQMFNFOUBUJPOUIBUBUUFNQUTUPEFDSZQU FODSZQUFENFTTBHFTCZOBSSPXJOHEPXODBOEJEBUFTFDSFULFZTCBTFEPOUIFEJGGFSFODFCFUXFFODPSSFDUBOE FSSPOFPVTDJQIFSUFYUVTJOHBOBUUBDLDBMMFE%JGGFSFOUJBM'BVMU"OBMZTJT %'" 

    w "TNFOUJPOFEBUUIFCFHJOOJOHPGUIJTBSUJDMF 8JEFWJOF-FWFMJTQFSGPSNFEJOBMBZFSUIBUJTOPUQSPUFDUFE CZ5&&5IJTNFBOTUIBUJUJTWFSZWVMOFSBCMFUPFYUFSOBMBUUBDLT*UJTBMTPTBJEUIBUUIFTFWVMOFSBCJMJUJFTBSF OPUMJLFMZUPCF fi YFEBTUIFZBSFQSPCMFNTJOUIF8JEFWJOFTQFDJ fi DBUJPO w )PXFWFS XJUI-FWFM )%DPOUFOUDBOOPUCFQMBZFE SFTVMUJOHJOMPXSFTPMVUJPOWJEFP&WFOJGJUDPVMECF EFDSZQUFE UIFRVBMJUZXPVMECFTPQPPSUIBUJUXPVMECFFOPVHIUPXBUDI w 8JEFWJOFJTUIVTBUSJTLPGCFJOHWVMOFSBCMF)PXFWFS 8JEFWJOFBMMPXTEFWFMPQFSTUPTQFDJGZUIFUPMFSBODF MFWFM*OUIJTDBTF -FWFMXBTUBSHFUFE CVUJUJTQPTTJCMFUPBWPJEUIJTEBOHFSCZTFUUJOHPOMZ-FWFMBOE -FWFM

  49. About Widevine's Crack w *OBEEJUJPOUPUIJTWVMOFSBCJMJUZ UIFSFBSFNBOZPUIFSQSPCMFNTXJUI8JEFWJOFUIBUDBOOPUCFTPMWFECZUIF TQFDJ fi DBUJPO'PSFYBNQMF DBQUVSFQSFWFOUJPO

    w *O8JEFWJOF *NFOUJPOFEFBSMJFSUIBU$%.BMTPIBOEMFTUIFWJEFPQSPDFTTJOH CVUUFDIOJDBMMZ $%.JT SFTQPOTJCMFGPSQBTTJOHUIFEFDSZQUFESBXEBUBUPUIFWJFXFS*OPUIFSXPSET UIFQMBZCBDLJUTFMGJTOPUVOEFS UIFKVSJTEJDUJPOPG$%.5IFSFGPSF TDSFFOTIPUTBSFQPTTJCMF)PXFWFS XIFOJUDPNFTUPTDSFFODBQUVSF $%. IJUTUIF04"1* BOEXIFOZPVDBQUVSF UIFWJEFPJUTFMGJTSFDPSEFEJOCMBDL CVUUIFBVEJPDBOCFDBQUVSFEBT JT w "TZPVDBOTFF 8JEFWJOFJUTFMGJTRVJUFJNQFSGFDU5IFSFGPSF JUJTOFDFTTBSZUPJNQMFNFOUBXBZUPQSFWFOU UIFWJEFPGSPNCFJOHFYUSBDUFEPOUIFBQQMJDBUJPOTJEFJOBDDPSEBODFXJUI8JEFWJOF w 'PSFYBNQMF JOUIFDBTFPG"OESPJE JUJTQPTTJCMFUPVTF4FDVSF'MBHUPQSFWFOUTDSFFOTIPUTGSPNCFJOHUBLFO JOUIF fi STUQMBDF#ZBQQMZJOHUIFTFNFUIPET JUJTQPTTJCMFUPQSFWFOUDBQUVSFDPNQMFUFMZ)PXFWFS UIJTJT POMZGPSOBUJWFBQQMJDBUJPOT TPJUXJMMOPUXPSLGPSCSPXTFST

  50. PlayReady w 1MBZ3FBEZJTUIFMFBTUVTFEPGUIFNBKPS%3.TZTUFNT CVUJUJTBDUVBMMZVTFEJOTPNFDBTFTJO"OESPJE BOE TJODFPOMZ1MBZ3FBEZJTTVQQPSUFEGPSQMBZCBDLJO*OUFSOFU&YQMPSFS UIFSFBSFNBOZDBTFTXIFSFJUJTVTFE VOFYQFDUFEMZ w 5IJT1MBZ3FBEZXBTPSJHJOBMMZDSFBUFEJOBQMVHJOGPSWJEFPQMBZCBDLDBMMFE.JDSPTPGU4JMWFSMJHIU"MUIPVHI

    4JMWFSMJHIUJTOPMPOHFSJOVTF UIF1MBZ3FBEZNFDIBOJTNSFNBJOTBOEJTTUJMMJOVTF w 1MBZ3FBEZ IPXFWFS TVQQPSUTCPUI$53BOE$#$DJQIFSTVJUFT TPZPVDBOVTFFJUIFSPOFXJUIPVUBOZ QSPCMFNT w 0OFPGUIFNBJOGFBUVSFTPG1MBZ3FBEZJTJUTBDDPVOUUBLJOHDBQBCJMJUZ5IJTJTRVJUFTJNJMBSUPUIFDPODFQUPG "DUJWF%JSFDUPSZ XIFSFUIFSFJTBMTPBDPODFQUDBMMFEBEPNBJODPOUSPMMFS%PNBJODPOUSPMMFSTBMMPXMJDFOTFT UPCFTIBSFEBDSPTTNVMUJQMFEFWJDFT5IFSFJTBMTPBDPODFQUDBMMFEBNFUFSJOHTFSWFS XIJDIBMMPXTUIFDMJFOU TJEFUPTUPSFUIFOVNCFSPGQMBZT5IFOVNCFSPGUJNFTBWJEFPJTQMBZFEDBOCFTFOUUPUIFTFSWFS XIJDIDBO CFVTFEUPJNQMFNFOUBTZTUFNUIBUDIBSHFTGPSUIFOVNCFSPGUJNFTBWJEFPJTXBUDIFE

  51. PlayReady Work f low

  52. About PlayReady's Work f low  *OUIFDBTFPG1MBZ3FBEZ JUTUBSUTXJUIFODSZQUJOHUIFDPOUFOU'JSTU UIFQBDLBHFEDPOUFOUJTFODSZQUFE BOE

    UIFOUIFDPOUFOUJTQMBDFEJO4PSTPNFPUIFSMPDBUJPO"UUIJTQPJOU UIFMJDFOTFLFZBOEFODSZQUJPOLFZBSFTFOU UPUIFMJDFOTFTFSWFS BOEUIFEPNBJOJOGPSNBUJPOJTTFOUUPUIFEPNBJOTFSWFS  8IFOUIFBQQQMBZTUIF1MBZ3FBEZDPOUFOU JUGFUDIFTUIFNBOJGFTUBOEDIFDLTJGJUJTFODSZQUFECZ1MBZ3FBEZ*G JUJTFODSZQUFE JUTFOETUIFJOGPSNBUJPOUP1MBZ3FBEZT$%.UISPVHI&.&5IJT fl PXJTTJNJMBSUP8JEFWJOFUIF $%.DSFBUFTBMJDFOTFSFRVFTUBOEQBTTFTUIFSFRVFTUUPUIFQMBZFSTJEFUISPVHIUIF&.&5IFQMBZFSTFOETUIF MJDFOTFSFRVFTUUPUIFMJDFOTFTFSWFS5IFQMBZFSTFOETUIFMJDFOTFSFRVFTUUPUIFMJDFOTFTFSWFS XIJDIBMTPTFOET UIF,FZ*% BVOJRVFWBMVF (6*% BTTPDJBUFEXJUIFBDIQJFDFPGDPOUFOU  5IFMJDFOTFTFSWFSSFDFJWFTUIFSFRVFTUBOEVTFTUIF,FZ*%UP fi OEUIFDPSSFTQPOEJOHMJDFOTF*GUIFSFJTB DPSSFTQPOEJOHMJDFOTF JUFODSZQUTUIFLFZUPEFDSZQUUIFDPOUFOUBOEUIFMJDFOTFJOGPSNBUJPOBOETFOETJUUPUIF BQQ  5IFBQQSFDFJWFTUIFFODSZQUFESFRVFTUGSPNUIFMJDFOTFTFSWFSBOEQBTTFTJUUPUIF$%.WJB&.&  5IF$%.VTFTBIBSEXBSFDPNQPOFOUUPEFDSZQUUIFFODSZQUFESFRVFTU FYUSBDUTUIFLFZOFFEFEUPEFDSZQUUIF DPOUFOUGSPNJU BOEEFDSZQUTUIFDPOUFOU*OEPJOHTP JUBMTPQSPWJEFTUIFDMJFOUXJUIBMJDFOTFTUPSFUPTUPSFUIF EFDSZQUFELFZT

  53. Advantages of PlayReady over Widevine w 1MBZ3FBEZJTTJNJMBSUP8JEFWJOF BOEBMTPEPFTOUIBWFNBOZBEWBOUBHFTOPXUIBU.JDSPTPGU&EHFIBTCFFO $ISPNJVNJ[FE CVUJUTJOUFHSBUJPOXJUIUIF04JTWFSZTUSPOH

    BOE1MBZ3FBEZBMMPXTZPVUPEPUIJOHTMJLF QSFWFOUDBQUVSF XIJDIXBTBESBXCBDLPG8JEFWJOF XJUIPVUDIBOHJOHJU w *OGBDU /FU fl JYVTFT1MBZ3FBEZJOTUFBEPG8JEFWJOFXIFOXBUDIJOHPO.JDSPTPGU&EHF JOEJDBUJOHUIBU 1MBZ3FBEZJTNPSFTFDVSFUIBO8JEFWJOFXIFOUBSHFUJOH8JOEPXTVTFST w "MTP JOUIFDBTFPG1MBZ3FBEZ TJODFJUJTIBOEMFECZUIF8JOEPXT3VOUJNF"1* 8JO35 JUJTVMUJNBUFMZ IBOEMFECZUIF/5LFSOFM4P UIFSFJTOPOFFEUPXPSSZBCPVUCFJOHFYUSBDUFEGSPNUIFPVUTJEF

  54. Hardware Security

  55. About Android Media Services w "OESPJEIBTIBENBOZWVMOFSBCJMJUJFTJOUIFQBTU NBOZPGXIJDIBSFSFMBUFEUPNVMUJNFEJB%FDPEJOHBO BSCJUSBSZWJEFP fi MFDBODBVTFBCVGGFSPWFS

    fl PXUIBUDBOCFVTFEUPFYFDVUFBSCJUSBSZDPEF XIJDIIBTCFFOB QSPCMFN w *OSFTQPOTF (PPHMFIBTNPWFETFSWJDFTUIBUIBOEMFTPGUXBSFDPEFDTUPBDPOTUSBJOFETBOECPY TUBSUJOHXJUI "OESPJE SFMFBTFEJO w 5IJTJNQSPWFETFDVSJUZCZJTPMBUJOHUIFWBSJPVTDPNQPOFOUTJOUPBTBOECPYXIFSFUIFZDPVMEOPUSVOXJUI QSJWJMFHFT w *OUIJTDPOTUSBJOFETBOECPY QSPDFTTFTSVOXJUIJOTUSVDUJPODBMMSFTUSJDUJPOTBOEJOUIF4&-JOVYEPNBJO'PS UIFJOTUSVDUJPODBMMSFTUSJDUJPO XFVTFTFDDPNQ BGFBUVSFPGUIF-JOVY,FSOFM w *OBEEJUJPO .FEJB$PEFDBOE.FEJB&YUSBDUPS XIJDIQSFWJPVTMZSFRVJSFE04VQEBUFT DBOOPXCFQBSUJBMMZ VQEBUFE5IJTJTBQBSUJBMVQEBUFUP.FEJB$PEFDBOE.FEJB&YUSBDUPS XIJDIVTFEUPSFRVJSFBO04XJEF VQEBUFUPBEESFTTWVMOFSBCJMJUJFTJO"OESPJEBOEFBSMJFS

  56. History of Android privileges w "OESPJE2TUBOETGPS "OESPJE01GPS "OESPJE/ GPS BOE"OESPJE.GPS

    w 1SJPSUP"OESPJE NFEJBTFSWFSXBTBTJOHMFQSPDFTTGPS NFEJBIBOEMJOH XJUIPOMZ&YUSBDUPSSVOOJOHTFQBSBUFMZ w 8JUI"OESPJE UIJTIBTCFFOSFEFTJHOFEBOEFBDI QSPDFTTJTOPXTQMJUJOUPTFQBSBUFQSPDFTTFT5IJTXBTUIF fi STUUJNFUIF&YUSBDUPSXBTQMBDFEJOBDPOTUSBJOFE TBOECPY w /FYUDBNF"OESPJE XJUIFWFONPSFDPOTUSBJOUT4JODF UIFSFBSFOPDIBOHFTJO"OESPJE UIFZBSFTIPXO UPHFUIFSJOUIJT fi HVSF

  57. History of Android privileges w "OEUIFOUIFSFJT"OESPJE)FSFUIFTPGUXBSFDPEFDT IBWFCFFOTFQBSBUFEGSPN.FEJB$PEFDBOESFUVSOFEUPUIF TZTUFNTJEF)FSF 4&-JOVYBOETFDDPNQQPMJDJFTIBWF CFFOHSFBUMZTUSFOHUIFOFE

    BOEOPXTPGUXBSFDPEFDTBSF OPUBMMPXFEUPBDDFTTEFWJDFESJWFSTUIBUQSFWJPVTMZ IBOEMFEDPEFDTGPSIBSEXBSFBDDFMFSBUJPO5IJTJOJUJBUJWFJT QBSUJDVMBSMZFGGFDUJWFCFDBVTFTPGUXBSFDPEFDT USBEJUJPOBMMZVTFBWBSJFUZPGMJCSBSJFTUPQBSTFCJUTUSFBNT GSPNVOUSVTUFETPVSDFT5IJTXBTBCSFFEJOHHSPVOEGPS WVMOFSBCJMJUJFT CVUCZSFTUSJDUJOHUIFVTFPGDPOTUSBJOFE TBOECPYFTBOEMJNJUJOHBDDFTTUPEFWJDFESJWFST XFXFSF BCMFUPTJHOJ fi DBOUMZSFEVDFUIFWVMOFSBCJMJUJFT w *OUIJTXBZ XIFOQSPDFTTJOHJTEPOFJOIBSEXBSF TFDVSJUZ JTFOTVSFECZSFTUSJDUJOHUIFCFIBWJPS

  58. Implement Security Sandbox using Unikernel

  59. The relationship between 
 FFmpeg and Libav w ''NQFHXBTPODFTQMJUJOUPBTPGUXBSFDBMMFE-JCBWJO .BSDIEVFUPDPO

    fl JDUTJOUIFEFWFMPQNFOUTUSVDUVSF "UUIFUJNF %FCJBOBEPQUFE-JCBW BOEUIFSFXBTBCJH GVTTBCPVUJU w )PXFWFS JO+VMZ %FCJBOBOOPVODFEUIBUUIFZXFSF HPJOHCBDLUP''NQFH5IFSFBTPOGPSUIFNPWFCBDLXBT UIBU''NQFHXBTGBTUFSUPEFWFMPQBOEGBTUFSUPBEESFTT WVMOFSBCJMJUJFT5IJTIBTMFEUPBUSFOECBDLUP''NQFH BOE -JCBWIBTTUPQQFESFMFBTJOHTJODFJUTSFMFBTFJO w *OFGGFDU XFWFHPOFCBDLUP''NQFH CVUUIFDPEFBEEFE JO-JCBWIBTOUNBEFJUJOUP''NQFHZFU w /PX UIFSFBTPOXIZ*NFOUJPOFE-JCBWIFSFJTCFDBVTF* XSPUF-JCBWJOVQQFSDBTF CVUUIFSFJTBMPXFSDBTFMJCBW

  60. about "libav" w 5IJTMJCBWEFOPUFTBMJCSBSZJO''NQFH4QFDJ fi DBMMZ UIF DPEFDMJCSBSZMJCBWDPEFD UIFDPOUBJOFSMJCSBSZMJCBWGPSNBU 

    BOEUIF fi MUFSMJCSBSZMJCBWGPSNBUBSFDPMMFDUJWFMZDBMMFE MJCBW w #BDLUPUIFUPQJDBUIBOE ''NQFHIBTBTFUPGMJCSBSJFT DBMMFEMJCBW5IJTTFUPGMJCSBSJFTJTVTFEFWFSZXIFSF

  61. About the license of FFmpeg w )PXFWFS JUJTJNQPSUBOUUPOPUFUIBUUIFSFBSFNBOZ VOPG fi

    DJBMDPEFDJNQMFNFOUBUJPOTJOMJCBWDPEFD.BOZPG UIFNBSFJNQMFNFOUFECZBOBMZ[JOHWJEFPPSBVEJP fi MFT PS CZBOBMZ[JOH%--TUIBUQSPWJEFDPEFDT BOEDBMDVMBUJOHUIF FODPEJOHQSPDFTTCBDLXBSETGSPNUIFSF w *OBEEJUJPO ''NQFHBTBXIPMFJTMJDFOTFEVOEFSUIF-(1-  XIJDIJODMVEFTMJCBW5IFSFGPSF JGZPVXBOUUPVTFJU DPNNFSDJBMMZ ZPVOFFEUPEJTDMPTFUIFTPVSDFDPEF*O BEEJUJPO JGZPVXBOUUPVTF.1&(SFMBUFEUFDIOPMPHJFT  ZPVOFFEUPQBZBMJDFOTFGFFUP.1&(-"

  62. Vulnerability of FFmpeg w 8FMM ''NQFHIBTBMPUPGWVMOFSBCJMJUJFT5IFSFBTPOXIZ UIFSFBSFTPNBOZJTUIBUUIFSFBSFNBOZUIJOHTJO''NQFH UIBUBSFOPUNBJOUBJOFE BOEBT*FYQMBJOFEFBSMJFS UIFTF

    BSFUIJOHTUIBUBSFJOUIFHSBZ[POF5IJTJTXIZ$7&TBSF GSFRVFOUMZJTTVFE CVUGSPNUIFTUBOEQPJOUPGEFWFMPQFST VTJOHMJCBW UIFSFBSFNBOZBEWBOUBHFTUPVTJOHMJCBWUP EFWFMPQVTFGVMTPGUXBSFXIJMFCFJOHBXBSFPGTFDVSJUZ w *UJTWFSZEJG fi DVMUUPNBJOUBJOBOEPQFSBUFBCBMBODF CFUXFFOUIFTFUXP w 5IJTJTXIZ*BEWPDBUFUIFBQQSPBDIPGSVOOJOHUIF TPGUXBSFPOBTFDVSJUZTBOECPYVTJOH6OJLFSOFM w 'JSTUPGBMM *XPVMEMJLFUPFYQMBJOBCPVU6OJLFSOFM

  63. Unikernel w 6OJLFSOFMJTBCVOEMFPGTQFDJ fi DBQQMJDBUJPOQSPHSBNT B TNBMM04KVTUUPSVOUIFN BOEUIFOFDFTTBSZDPO fi HVSBUJPO

    fi MFT w "MJCSBSZCBTFE04JTPOFJOXIJDI04GVODUJPOTBSF JNQMFNFOUFEBTMJCSBSJFT BMMPXJOHBQQMJDBUJPOTUPEJSFDUMZ BDDFTTIBSEXBSFXJUIPVUFYDIBOHJOHJOGPSNBUJPOCFUXFFO VTFSTQBDFBOELFSOFMTQBDF w )PXFWFS JOPSEFSUPBDDFTTIBSEXBSF BESJWFSNVTUCF XSJUUFOGPSUIFMJCSBSZCBTFE04 XIJDIJTBIFBWZCVSEFO w 5PTPMWFUIJTQSPCMFN 6OJLFSOFMJTBUFDIOPMPHZUIBUSVOT POBWJSUVBMFOWJSPONFOU

  64. Midori w 8IFOXFUBMLBCPVU6OJLFSOFM UIFSFJTPOFUIJOHUIBUXF TIPVMEOPUGPSHFU*UJTBQSPKFDUDBMMFE4JOHVMBSJUZUIBU .JDSPTPGU3FTFBSDIVTFEUPEPSFTFBSDIBOEEFWFMPQNFOU PO w 5IF4JOHVMBSJUZQSPKFDUIBTCFFOVOEFSSFTFBSDIBOE EFWFMPQNFOUGPSNPSFUIBOZFBST

    BOEJUTSFTVMUTIBWF DPOUSJCVUFEUPUIFEFWFMPQNFOUPGBOPQFSBUJOHTZTUFN DBMMFE.JEPSJ w )PXFWFS .JEPSJXBTOFWFSSFMFBTFEBOEJUXBTTBJEUIBU UIFQSPKFDUXBTQSBDUJDBMMZEJTCBOEFE w +PF%VGGZ BGPSNFSQSPKFDUNFNCFS UBMLFEBCPVU.JEPSJPO IJTCMPHJO/PWFNCFS TPJGZPVSFJOUFSFTUFEJOUIF QSPKFDU QMFBTFWJTJU+PFTCMPH

  65. MirageOS w .JSBHF04JTBMJCSBSZPQFSBUJOHTZTUFNUIBUDPOTUSVDUT VOJLFSOFMTGPSTFDVSF IJHIQFSGPSNBODFOFUXPSL BQQMJDBUJPOTBDSPTTBWBSJFUZPGDMPVEDPNQVUJOHBOE NPCJMFQMBUGPSNT$PEFDBOCFEFWFMPQFEPOBOPSNBM04 TVDIBT-JOVYPSNBD04 BOEUIFODPNQJMFEJOUPBGVMMZ TUBOEBMPOF

    TQFDJBMJTFEVOJLFSOFMUIBUSVOTVOEFSB9FOPS ,7.IZQFSWJTPS

  66. MirageOS w /PXUIBUXFIBWFUBMLFEBCPVU6OJLFSOFM *XPVMEMJLFUP UBMLBCPVUIPXUPBDUVBMMZSVO6OJLFSOFM w 8IFOXFSVO6OJLFSOFM XFOFFEUPUBLFDBSFPGTFDVSJUZ *UJTJNQPSUBOUUPLFFQBDDFTTUPBNJOJNVNJOPSEFSUP SFEVDFUIFSJTLPGFYUFSOBMBUUBDLT5IFTBNFDBOCFTBJE

    GPSSVOOJOHUIF6OJLFSOFM w 5IFTBNFDBOCFTBJEGPSSVOOJOHUIF6OJLFSOFM5IFSFJTB TPGUXBSFDBMMFE4PMPUIBUQSPWJEFTBOFOWJSPONFOUUIBUJT FBTZUPSVOXIJMFLFFQJOHUIFTFUIJOHTJONJOE

  67. Solo5 w 4PMPJTUIFTPGUXBSFUIBUNFEJBUFTCFUXFFOUIF04MBZFS BOEUIFQMBUGPSNMBZFS BOECZQSPWJEJOHBDPNNPO"1* UIBUJOUFSBDUTXJUIUIF04MBZFS UIF04MBZFSJUTFMGDBOSVO XJUIPVUSFHBSEUPUIFQMBUGPSN

  68. Solo5 w 5IFSFBSFBMTPUXPNBJOQMBUGPSNMBZFSTUIBU4PMPDBO VTF w 5IF fi STUPOFJTIWU )BSEXBSF7JSUVBMJ[FE5FOEFS XIJDI

    VTFT,7.GPS-JOVYBOEWNNGPS#4% w 5IFTFDPOEJTTQU 4BOECPYFE1SPDFTT5FOEFS TQUVTFT UIFTFDDPNQQPMJDZBTJO"OESPJE w 5IFNBJOEJGGFSFODFCFUXFFOIWUBOETQUJTUIBUIWUSVOT BTBWJSUVBMNBDIJOFCZFYDIBOHJOH"1*TXJUI,7. XIJMF TQUDBOSVOBTBTJOHMFQSPDFTTPO-JOVYCZSFTUSJDUJOH TZTUFNDBMMT

  69. Applied research using Unikernel w *BNVTJOHUIJT6OJLFSOFMJONZSFTFBSDIUPSVOUIFBQQMJDBUJPOJNQMFNFOUFEJOMJCBWBTNFOUJPOFEFBSMJFS &WFOJGBCVGGFSPWFS fl PXPDDVSTXIFOEFDPEJOHJMMFHBMWJEFPEBUB UIFIPTUTJEFJTQSPUFDUFECZ6OJLFSOFM

     TPUIFSFJTOPOFFEUPXPSSZBCPVUEBNBHFUPUIFIPTUTJEF

  70. Applied research using Unikernel w *OBEEJUJPO UIF6OJLFSOFMJTOPXCFJOHBDUJWFMZVTFEJO*P5EFWJDFT0SJHJOBMMZ TFDVSJUZJTWFSZJNQPSUBOUGPS *P5EFWJDFTCFDBVTFUIFZDPNNVOJDBUFXJUIUIF*OUFSOFUXJUIGFXSFTPVSDFT*UJTTBJEUIBUUIFTFDVSJUZPG *P5DBOCFHVBSBOUFFECZVTJOHUIF6OJLFSOFM

    BOESFTFBSDIPOUIJTUPQJDJTJOQSPHSFTT w *OUIFNVMUJNFEJBXPSME UIFSFBSFNBOZBSFBTUIBUBSFRVJUFDPOOFDUFEUP*P5'PSFYBNQMF JUJTJOWPMWFEJO NBOZBSFBTTVDIBTTVSWFJMMBODFDBNFSBT ESJWJOHSFDPSEFSTJODBST BOENPSFSFDFOUMZ UIFSNPHSBQIZUP NFBTVSFCPEZUFNQFSBUVSF)PXFWFS NVMUJNFEJBJTBWFSZUSBDUBCMFFOUSZQPJOUGPSBOBUUBDLFSUPCSFBLJO  BOEVQMPBEJOHWJEFPPSBVEJP fi MFTDBODBVTFUIFJOUFOEFECFIBWJPS*OPSEFSUPQSFWFOUUIFTFQSPCMFNT * XJMMCFDPOEVDUJOHGVUVSFSFTFBSDIVTJOHUIF6OJLFSOFM w "UUIFNPNFOU *BNPOMZBCMFUPSVOTPGUXBSFDPEFDT CVU*UIJOLJUXPVMECFJOUFSFTUJOHUPFWFOUVBMMZ TVQQPSU$6%"BOEIBSEXBSFDPEFDTBTXFMM

  71. Conclusion

  72. Conclustion w 5PEBZ *JOUSPEVDFEUIFUPQJDPGNVMUJNFEJBTFDVSJUZGSPNUIFQFSTQFDUJWFPGCPUITPGUXBSFBOEIBSEXBSF w *OQBSUJDVMBS *XPVMEMJLFUPUBMLBCPVUNZFGGPSUTVTJOH6OJLFSOFM XIJDIJTBQSPKFDUUIBU*IBWFCFFO XPSLJOHPOQFSTPOBMMZXJUIPVUBOZDPOOFDUJPOUPBDPNQBOZ CVUXIJDI*IPQFUPDPMMBCPSBUFXJUIWBSJPVT

    QFPQMFTPPO w *GZPVBSFJOUFSFTUFEJOUIJTQSPKFDU QMFBTFDPOUBDUNF*GZPVBSFJOUFSFTUFE QMFBTFDPOUBDUNFBOEMFUT XPSLUPHFUIFSUPDSFBUFBOJOUFSFTUJOHQSPKFDU

  73. Thank you!