Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Multimedia Security Topics

Avatar for Shumpei Urabe Shumpei Urabe
June 23, 2021
Technology
0
2.3k

Multimedia Security Topics

OWASP Sendai #48
https://owaspsendai.connpass.com/event/213819/

Avatar for Shumpei Urabe

Shumpei Urabe

June 23, 2021
Tweet

More Decks by Shumpei Urabe

See All by Shumpei Urabe
AIを活用した放送技術スタートアップの制作現場改革について
Avatar for Shumpei Urabe yaminoma
0
14k
動画配信技術について
Avatar for Shumpei Urabe yaminoma
1
1.5k
コロナ禍でのライブストリーミングの変化とテレビ放送の規格について
Avatar for Shumpei Urabe yaminoma
0
1k
今日から分かる Android Audioの全て
Avatar for Shumpei Urabe yaminoma
0
440
Apple Low-Latency HLSを使った 超低遅延配信について
Avatar for Shumpei Urabe yaminoma
4
4.9k
今日から分かる AVAudioEngineの全て
Avatar for Shumpei Urabe yaminoma
4
6k
Cross Platform Video Player
Avatar for Shumpei Urabe yaminoma
0
470
PHPとRustを組み合わせて音声ファイルをエンコードする話
Avatar for Shumpei Urabe yaminoma
0
3.4k
字幕のはなし
Avatar for Shumpei Urabe yaminoma
4
1.8k

Other Decks in Technology

See All in Technology
20250718_ITSurf_“Bet AI”を支える文化とコストマネジメント
Avatar for helosshi helosshi
1
210
Webの技術とガジェットで那須の子ども達にワクワクを！ / IoTLT_20250720
Avatar for you（@youtoy） you
PRO
0
120
データエンジニアリング 4年前と変わったこと、 4年前と変わらないこと
Avatar for Sotaro Tanaka tanakarian
2
360
AIを使っていい感じにE2Eテストを書けるようになるまで / Trying to Write Good E2E Tests with AI
Avatar for Akihiro Yokota katawara
3
1.6k
Snowflake のアーキテクチャは本当に筋がよかったのか / Data Engineering Study #30
Avatar for Yoshi Matsuzaki indigo13love
0
260
Microsoft Fabric ガバナンス設計の一歩目を考える
Avatar for Ryoma Nagata ryomaru0825
1
260
Talk to Someone At Delta Airlines™️ USA Contact Numbers
Avatar for seahorse75930 travelcarecenter
0
170
AI駆動開発 with MixLeap Study【大阪支部 #3】
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
0
200
増え続ける脆弱性に立ち向かう: 事前対策と優先度づけによる 持続可能な脆弱性管理 / Confronting the Rise of Vulnerabilities: Sustainable Management Through Proactive Measures and Prioritization
Avatar for NTT docomo Business nttcom
1
160
QAを早期に巻き込む”って どうやるの？ モヤモヤから抜け出す実践知
Avatar for Sammy(MoritaMasami) moritamasami
2
180
PHPからはじめるコンピュータアーキテクチャ / From Scripts to Silicon: A Journey Through the Layers of Computing
Avatar for HASEGAWA Tomoki tomzoh
2
380
Building GoReleaser - from shell script to paid product
Avatar for Carlos Alexandro Becker caarlos0
0
270

Featured

See All Featured
Keith and Marios Guide to Fast Websites
Avatar for Keith Pitt keithpitt
411
22k
Designing Experiences People Love
Avatar for Jonathan Moore moore
142
24k
Java REST API Framework Comparison - PWX 2021
Avatar for Matt Raible mraible
31
8.7k
Rails Girls Zürich Keynote
Avatar for Gregor Martynus gr2m
95
14k
Why You Should Never Use an ORM
Avatar for John Nunemaker jnunemaker
PRO
58
9.5k
Scaling GitHub
Avatar for Zach Holman holman
461
140k
Making the Leap to Tech Lead
Avatar for Ryan Cromwell cromwellryan
134
9.4k
Adopting Sorbet at Scale
Avatar for Ufuk Kayserilioglu ufuk
77
9.5k
Dealing with People You Can't Stand - Big Design 2015
Avatar for Cassini Nazir cassininazir
367
26k
StorybookのUI Testing Handbookを読んだ
Avatar for Shingo Yamazaki zakiyama
30
5.9k
Improving Core Web Vitals using Speculation Rules API
Avatar for Sergey Chernyshev sergeychernyshev
18
1k
CSS Pre-Processors: Stylus, Less & Sass
Avatar for Bermon Painter bermonpainter
357
30k

Transcript

  1. Multimedia Security Topics Speaker: Shumpei Urabe(NAXA, Inc.) OWASP Sendai #48

  2. Speaker Bio 4IVNQFJ6SBCF $&01SFTJEFOUPG/"9" *OD 'PVOEFSPG'VLVPLB7JEFP5FDI .VMUJNFEJB3FTFBSDIFS

  3. Today's 
 Outline "CPVU%3. $BUFHPSZPG%3. "CPVU5&& %FDSZQUPG%3. )BSEXBSF4FDVSJUZ *NQMFNFOU4FDVSJUZ4BOECPY VTJOH6OJLFSOFM

    $PODMVTJPO

  4. About DRM

  5. Live streaming that continues to be popular w 8JUIUIF$07*% XIBUJTDVSSFOUMZHBJOJOH

    NPNFOUVNJTPOMJOFTUSFBNJOH w /PXUIBUUIFHPWFSONFOUBOEQSFGFDUVSFTBSF GPSDJOHVTUPHPXJUIPVUBOBVEJFODF UIFPOMZXBZ UPEFMJWFSFOUFSUBJONFOUJTUISPVHIMJWFTUSFBNJOH w 4P CFIJOEUIFTDFOFTBTXFTQFBL UIFSFJTBMPUPG EJTUSJCVUJPOHPJOHPO w 5IFSFJTBDVSSFOUQSPCMFNXJUIUIJTUZQFPGPOMJOF TUSFBNJOH

  6. Video Thief

  7. No captures allowed w *UJTFBTZUPUBLFBTDSFFOTIPUPGUIFEFMJWFSZQBHF PS SFDPSECZEFTLUPQDBQUVSF BOEFWFOUVBMMZSFDPSEUIF NPOJUPSXJUIBTNBSUQIPOFDBNFSB"OEJUJTJNQPTTJCMF UPTUPQUIFNDPNQMFUFMZ

    w *GZPVXBOUUPTUPQUIFNDPNQMFUFMZ ZPVXJMMIBWFUP USBDLUIFJSNPVTFBOELFZCPBSE MJLFJO$#5FYBNT BOE ZPVXJMMBMTPIBWFUPXFBSBXFCDBNUPNPOJUPSUIFN  CVUZPVEPOUXBOUUPHPUISPVHIUIBUNVDIUSPVCMF XIFOZPVBSFFOKPZJOHXBUDIJOHUIFN SJHIU  w "TZPVDBOTFF JUJTOPUQPTTJCMFUPQSFWFOUJU DPNQMFUFMZ CVUJUJTQPTTJCMFUPNBLFJUJNQPTTJCMF XJUIPVUVTJOHBWFSZEJG fi DVMUNFUIPE

  8. It is DRM.

  9. Digital Rights Management w %3.JTBOBDSPOZNGPS%JHJUBM3JHIUT.BOBHFNFOU w %3.JTBNFDIBOJTNUIBUVTFTTPGUXBSFDPOUSPMUPQSPUFDUDPOUFOU BOE%3.JUTFMGJTOPUBUFDIOPMPHZ w 5IFSFJTBMTPBDPQZHVBSE

    ""$4 GPS%7%TBOE#MVSBZTUIBUJTTJNJMBS CVUJOBCSPBEFSTFOTF JUDBO CFTBJEUPCFBGPSNPG%3. w 5IFIJTUPSZPG%3.JTRVJUFPME XJUIDPODFQUVBMQSPQPTBMTBTFBSMZBTUIFT w 0ODFVQPOBUJNF XIFO fl BTINFNPSZBOEIBSEEJTLTXFSFOPUBWBJMBCMF NBHOFUJDUBQFTXFSFVTFEGPS SFDPSEJOH w )PXFWFS NBHOFUJDUBQFTDPVMECFFBTJMZEVQMJDBUFE BOEUIJTMFEUPSBNQBOUEVQMJDBUJPO NBLJOHJU EJG fi DVMUGPSEFWFMPQFSTUPSFDPWFSUIFJSEFWFMPQNFOUDPTUTFWFOBGUFSNBLJOHIVHFJOWFTUNFOUT w 5IFDPODFQUPG%3.XBTCPSOUPQSFWFOUUIJTGSPNIBQQFOJOH*OUIFT UIFJEFBPGFODSZQUJOHBOE QSPUFDUJOHDPOUFOUUISPVHITPGUXBSFDPOUSPMXBTQSPQPTFE w 5IJTJTXIFSFUIFIJTUPSZPG%3.CFHBO

  10. Category of DRM

  11. There are many types of DRM w 5PEBZ UIFTUSFBNJOHNFUIPEJTUIFNBJOTUSFBNNFUIPE GPSEJTUSJCVUJOHWJEFPBOEBVEJP

    BOEXJUIUIFTQSFBEPG $%/T UIFTUSFBNJOHNFUIPEJTCFJOHVTFEJOTUFBEPG EPXOMPBEJOHBTJOHMF fi MFBTJUJT TFOEJOHJUJOTNBMM QJFDFTUPGBDJMJUBUFNPSF fl FYJCMFDBDIFDPOUSPM w 0OFPGUIFBEWBOUBHFTPGUIFTUSFBNJOHNFUIPEJTUIBU UIFDMJFOUPOMZOFFETUPBDRVJSFUIFOFDFTTBSZEBUB TP UIFSFJTOPOFFEUPBDRVJSFFWFSZUIJOH5IJTNBLFTUIF BDRVJTJUJPOBOEQMBZCBDLQSPDFTTGBTUFS BOEBMTP FMJNJOBUFTUIF fl PXPGVOOFDFTTBSZUSBG fi D XIJDIIBT NBOZBEWBOUBHFTGPSCPUIUIFEFMJWFSZTJEFBOEUIF WJFXJOHTJEF

  12. HLS and MPEG-DASH w *OUIFXPSMEPGNVMUJNFEJB UIFSFBSFUXPTUSFBNJOH NFUIPET)551-JWF4USFBNJOH DPNNPOMZLOPXOBT)-4  XIJDIJTCBTFEPO)551BOEEFWFMPQFECZ"QQMF

    BOE .1&(%"4) BMTPCBTFEPO)551BOEEFWFMPQFECZ .1&( w *OHFOFSBM CPUIBSFVTFE CVU)-4JTNPSFDPNNPOMZ VTFEUIFTFEBZTNVJTBNBOJGFTU fi MFUIBUDPOUBJOT EFUBJMFEWJEFPEBUB BOEUIFQMBZFSGFUDIFTJUUPQMBZUIF WJEFP w 5IFSFBSFTFWFSBMUZQFTPGFODSZQUJPONFUIPETGPSUIJT )-4BOE%"4)

  13. HLS-AES w )-4"&4FODSZQUT)-4TFHNFOUTXJUI"&4 w 5IFLFZJOGPSNBUJPOJTDPOUBJOFEJOUIFNBOJGFTU BOE XIFOQMBZJOHUIFWJEFP UIFQMBZFSSFUSJFWFTUIFLFZ GSPNUIFLFZJOGPSNBUJPOBOEEFDSZQUTUIFTFHNFOUGPS QMBZCBDL

    w 5IFBEWBOUBHFPGUIJTJTUIBUFWFOJGZPVEPXOMPBEUIF )-4TFHNFOUBTJUJT ZPVXJMMOPUCFBCMFUPQMBZJUPO QMBZFSTTVDIBT7-$ w 5IFEJTBEWBOUBHF IPXFWFS JTUIBUUIFLFZJTWFSZFBTZ UPPCUBJO*OGBDU UIFLFZJOGPSNBUJPOJTXSJUUFOJOUIF NBOJGFTU CVUJUJTFBTZUPPCUBJOUIFLFZGSPNIFSF BOE JUDBOCFFBTJMZPCUBJOFEBOEEFDSZQUFE

  14. FairPlay w 'BJS1MBZIBTCFFOBSPVOEGPSBMPOHUJNF BOEFWFOUIF TPOHT*QVSDIBTFEPOJ5VOFTVTFEUPIBWFUIFJSBVEJP fi MFTQSPUFDUFECZ'BJS1MBZ BOEUIF*1" J04BQQMJDBUJPO FYFDVUBCMF

    EJTUSJCVUFEJOUIF"QQ4UPSFXBTBMTP QSPUFDUFECZ'BJS1MBZ w 0OFPGUIFNBJOGFBUVSFTPG'BJS1MBZJTUIBUJUJT JOUFHSBUFEJOUPUIFPQFSBUJOHTZTUFN TPUIBUUIF%3. NFDIBOJTNDBOCFJOUFHSBUFEJOUPUIFPQFSBUJOHTZTUFN UPQSFWFOUDBQUVSJOHBOENPEJ fi DBUJPOGSPNPVUTJEF w 5IFBQQMJDBUJPOPG'BJS1MBZUP)-4JT'BJS1MBZ4USFBNJOH 'BJS1MBZ4USFBNJOHPOMZTVQQPSUT)-4PS$."'

  15. Widevine w 'PMMPXJOH"QQMFTMFBE (PPHMFEFWFMPQFEBQSPUFDUJPO TZTUFNDBMMFE8JEFWJOF XIJDITVQQPSUT)-4 .1&( %"4) BOE$."' w

    8JEFWJOFJTB%3.TZTUFNPSJHJOBMMZQSPWJEFECZB DPNQBOZDBMMFE8JEFWJOF5FDIOPMPHJFT XIJDIXBT BDRVJSFECZ(PPHMFJO*UJTOPXVOEFSUIF "MQIBCFUVNCSFMMB w *UJTOPFYBHHFSBUJPOUPTBZUIBU8JEFWJOFJTUIFNPTU VTFE%3.JOUIFXPSME w 5PEBZ XJUIUIFXJEFTQSFBEVTFPG(PPHMF$ISPNFBOE UIFQPQVMBSJUZPG"OESPJETNBSUQIPOFT 8JEFWJOFJT CFJOHVTFEPOBXJEFWBSJFUZPGEFWJDFT

  16. Security Level of Widevine w 0OFPGUIFVOJRVFGFBUVSFTPG8JEFWJOFJTBDPODFQUDBMMFETFDVSJUZMFWFM5IJTTFDVSJUZMFWFMJTBTTJHOFE CBTFEPOIPXXFMMUIFQMBZCBDLEFWJDFNFFUTUIFTFDVSJUZSFRVJSFNFOUT w 5IJTTFDVSJUZMFWFMJTEFUFSNJOFEBUUIFIBSEXBSFMFWFM BOEWJFXJOHJTSFTUSJDUFECZUIFTFDVSJUZMFWFM

    w 5IFSFBSFUISFFMFWFMTPGTFDVSJUZ XJUIMFWFMCFJOHUIFTUSPOHFTU5IFOFYUTUSPOHFTUJTMFWFM  GPMMPXFECZMFWFM BOEUIFMPXFTUJTMFWFM

  17. Security Level of Widevine w "UMFWFM BMMDPOUFOUQSPDFTTJOH FODSZQUJPOBOEDPOUSPMNVTUCFQFSGPSNFEJOUIF4P$TUSVTUFE FYFDVUJPOFOWJSPONFOU UIJTJTDBMMFE5&&

    UPQSFWFOUFYUFSOBMUBNQFSJOHPSDPQZJOHPGNFEJB fi MFT'PS FYBNQMF JOUIFDBTFPG"3.QSPDFTTPST UIFSFJTBGVODUJPODBMMFE5SVTU;POF XIJDIJTB5&& w *OMFWFM UIFDPOUFOUFODSZQUJPOJUTFMGJTEPOFCZ5&& CVUUIFQMBZCBDLQSPDFTTJTOPUQFSGPSNFECZ 5&& w -FWFMBQQMJFTXIFOUIFEFWJDFEPFTOPUIBWF5&& PSXIFOJUJTQSPDFTTFEPVUTJEFUIFEFWJDF)PXFWFS  FWFOBU-FWFM JUJTOFDFTTBSZUPUBLFBQQSPQSJBUFNFBTVSFTBHBJOTUFODSZQUJPO

  18. Security Level of Widevine w 5IJTJTUIFTFDVSJUZMFWFM*GZPVEPOPUNFFUMFWFM ZPVXJMMOPUCFBCMFUPQMBZ)%PSIJHIFSRVBMJUZ*O BEEJUJPO FWFOJGUIFEFWJDFNFFUTMFWFM ZPVDBOEFDJEFXIFUIFSUPQMBZJUPSOPUPOUIFBQQMJDBUJPO

    TP ZPVNBZOPUCFBCMFUPQMBZDFSUBJOEFWJDFTVTJOHUIFCMBDLMJTUNFUIPE5IFSFBTPOGPSUIJTCMBDLMJTUJOH NFUIPEJTUIBUFWFOJGUIFBVUIFOUJDBUJPOQBTTFT 8JEFWJOFEPFTOPUHVBSBOUFFUIBUUIFEFWJDFJT DPNQMFUFMZTBGF TPUIFSFBSFDBTFTXIFSFTPNFEFWJDFTPG$IJOFTFQSPEVDUTBSFSFKFDUFE w "MTP ZPVNBZUIJOLUIBUJUJTRVJUFEJG fi DVMUGPSEFWJDFNBOVGBDUVSFSTUPPCUBJO8JEFWJOF CVUBMUIPVHI UIFSFJTBDFSUBJOBNPVOUPGUFEJPVTQSPDFTT 8JEFWJOFJUTFMGDBOCFPCUBJOFEGPSGSFF TPNBOVGBDUVSFST XIPEPOPUPCUBJO8JEFWJOFBSFMJLFMZUPIBWFTPNFTPSUPGQSPCMFN w 5IJT8JEFWJOF CVUVOMJLF"QQMF'BJS1MBZ 8JEFWJOFJUTFMGJTOPUDPNQMFUFMZJOUFHSBUFEJOUPUIF04 BOEJO UIFDBTFPG8JEFWJOFMFWFM 4%RVBMJUZDPOUFOUDBOCFQMBZFE TPJUJTOPUDPNQMFUFMZQSPUFDUFE5IJTJTB CJHEJGGFSFODF

  19. PlayReady w 1MBZ3FBEZ EFWFMPQFECZ.JDSPTPGU TVQQPSUT)-4BOE .1&(%"4) $."' BTXFMMBT8JEFWJOF BOE.JDSPTPGUT PXOGPSNBU

    .JDSPTPGU4NPPUI4USFBNJOH w 1MBZ3FBEZXBTJOUSPEVDFEJOBOEXBTDSFBUFEUP QSPUFDU8.7 8JOEPXT.FEJB7JEFP BOE8." 8JOEPXT .FEJB"VEJP  w 1MBZ3FBEZ MJLF'BJS1MBZ JTJOUFHSBUFEJOUPUIF04BOEJT UIFSFGPSFTFDVSF*UDBOBMTPCFQSFWFOUFEXJUISFTQFDU UPDBQUVSJOH FUD

  20. OPL of PlayReady w 1MBZ3FBEZ MJLF8JEFWJOF IBTUXPTFDVSJUZMFWFMT UIF fi STUPOFJTDBMMFE01-

    0VUQVU1SPUFDUJPO-FWFMT  w 5IF fi STUJTDBMMFE01- 0VUQVU1SPUFDUJPO-FWFMT "DDPSEJOHUP.JDSPTPGUTEPDVNFOUBUJPO UIFSFBSF FJHIU01-MFWFMT       BOE XJUICFJOHUIFIJHIFTUBOE CFJOHUIFMPXFTU w 5IF01-JT fi OFMZDPOUSPMMFECZUIFPVUQVUEFTUJOBUJPOPGUIFEFWJDF'PSFYBNQMF XIFOQMBZJOHDPOUFOU POBEJTQMBZUIBUEPFTOPUTVQQPSU)%$1 JUXJMMCF01-PSMBUFS BOE)%QMBZCBDLXJMMOPUCF QPTTJCMF

  21. SL of PlayReady w 4FDPOEMZ UIFSFJTBTFDVSJUZMFWFMDBMMFE4-UIFSFBSFUISFFUZQFTPG4-4- 4- BOE4- w 5IFSFBSFUISFF4-T4-

    4- BOE4-4-JTUIFMPXFTUTFDVSJUZMFWFMJO1MBZ3FBEZ4- JTUIFMPXFTUTFDVSJUZMFWFMJO1MBZ3FBEZBOETIPVMEOPUCFVTFEGPSBOZUIJOHPUIFSUIBOEFCVHHJOH w 4-JTBTPGUXBSFPOMZWFSTJPOPG%3. w 5IF4-IBOEMFT%3.JOBTFDVSFFYFDVUJPOFOWJSPONFOUTVDIBT5FF w 3FDFOUMZ UIFSFBSFNPSFBOENPSFTFSWJDFTUIBUSFRVJSF4-UPCFBCMFUPQMBZCBDL)%PSIJHIFS RVBMJUZDPOUFOU

  22. About TEE

  23. Trusted Execution Environment w "UUIFTFDVSJUZMFWFM MFUTEJWFBMJUUMFEFFQFSJOUP5&&  XIJDITUBOETGPS5SVTUFE&YFDVUJPO&OWJSPONFOU B GFBUVSFUIBUBMMPXTDSJUJDBMPQFSBUJPOTUPCFFYFDVUFE

    TBGFMZBOEJOEFQFOEFOUMZPGUIF04 w 5&&IBTCFFOJODMVEFEJOSFDFOU$16T UIFNPTUGBNPVT CFJOH*OUFM4(9 ".%4&7 BOE"3.5SVTU;POF w 5&&POMZQSPWJEFTRVBSBOUJOFFYFDVUJPO BOEUIF QMBUGPSNVTJOH5&&NVTUCFBCMFUPTFDVSFMZIPME TFOTJUJWFJOGPSNBUJPOBOEFOTVSFTBGFUZXIFOFYFDVUJOH 5&&

  24. Trusted Execution Environment w 5&&JTBOJTPMBUFEFYFDVUJPOFOWJSPONFOU CVUUIFSFBSF TFWFSBMPUIFSJTPMBUFEFYFDVUJPOGVODUJPOTCFTJEFT5&& 5IFTFBSFDBMMFE)BSEXBSF*TPMBUFE&YFDVUJPO&OWJSPONFOU )&& 

    w 5&&JTBUZQFPG)&& CVUUIF5SVTUFE1MBUGPSN.PEVMF 51. SVOTPOBTFQBSBUFDIJQUIBUJTDPNQMFUFMZ JOEFQFOEFOUPGUIF$16 w *OUIFDBTFPG51. JUQSPWJEFTLFZHFOFSBUJPO DPO fi EFOUJBM JOGPSNBUJPOTUPSBHF SBOEPNOVNCFSHFOFSBUJPO FUD BOE XPSLTXJUIGVODUJPOTTVDIBT5SVTUFE#PPUBOE#JU-PDLFS w 5&&SVOTJUTPXOPQFSBUJOHTZTUFN DBMMFE5SVTUFE04 PO XIJDIUIF5SVTUFE"QQMJDBUJPO 5" SVOT

  25. ARM TrustZone w "3.5SVTU;POFJTUIFNPTUXJEFMZVTFE5&&BOEJTVUJMJ[FE JOTNBSUQIPOFTBTXFMMBTHBNJOHEFWJDFTTVDIBTUIF /JOUFOEP4XJUDI w 5SVTU;POFIBTBMPOHIJTUPSZ IBWJOHCFFOJOUSPEVDFEJO "3.W,JO

    BOEDSFBUFTBTJOHMFJTPMBUFEFYFDVUJPO FOWJSPONFOUBUCPPUUJNF w *OUIF$PSUFY"BSDIJUFDUVSF XIJDIJTUIFNPTUVTFE 5SVTU;POFUPEBZ BMMQSJWJMFHFTBSFBWBJMBCMFJOUIF5SVTUFE 048IFOBDDFTTFECZUIFPSJHJOBM04 4FDVSF.POJUPS$BMM 4.$ JOTUSVDUJPOTBSFVTFEUPDPNNVOJDBUFXJUIJU w .BOZPGUIFGFBUVSFTPG"3.5SVTU;POFBSFJNQMFNFOUFE CZTPGUXBSF

  26. Intel SGX w *OUFM4(9 4PGUXBSF(VBSE&YFDVUJPO JTBOJTPMBUFE FYFDVUJPOGFBUVSFJOUSPEVDFEJO4LZMBLFBOEMBUFS w 8JUI4(9 UIFPOMZQSJWJMFHFBWBJMBCMFUPUIFVTFSJTUIF

    VTFSMFWFM3JOHJOUIFFYFDVUJPOFOWJSPONFOU DBMMFE &ODMBWF BOEOPUBMMQSJWJMFHFTBSFBWBJMBCMF w "MTP &ODMBWFDBOPOMZVTFBNBYJNVNPG.#PG NFNPSZTQBDF

  27. AMD SEV w ".%4&7 4FDVSF&ODSZQUFE7JSUVBMJ[BUJPO JTBOJTPMBUFE FYFDVUJPOFOWJSPONFOUJOUSPEVDFEJOUIF&1:$TFSJFT4&7 JTBWJSUVBMJ[BUJPOBXBSF5&&JOUFOEFEGPSVTFJOWJSUVBM NBDIJOFTJOUIFDMPVE w

    4&7JTBWJSUVBMJ[BUJPOBXBSF5&&UIBUJTJOUFOEFEUPCF VTFEJOWJSUVBMNBDIJOFTJOUIFDMPVE0OFPGUIFNBJO GFBUVSFTPG4&7JTUIBUJUEPFTOPUQSFQBSFBEFEJDBUFE NFNPSZBSFBGPSUIF5&& CVULFFQTUIF7.FYFDVUJPO JUTFMGTFDSFU w *OPUIFSXPSET CZNBOBHJOHUIFFODSZQUJPOPGUIF7.T NFNPSZBOEWJSUVBMEJTLT UIFIZQFSWJTPSDBOOPUQFFLBUJU w 4PGUXBSFUIBUVTFT4&7JODMVEFT3FEIBUT&OBSY

  28. TEE Case Studies w 5&&JTBMTPVTFEGPSLFZNBOBHFNFOUJOUIF%3.XFUBMLFEBCPVUFBSMJFSJO"OESPJE UIFSFJTBLFZ NBOBHFNFOUNFDIBOJTNDBMMFE,FZNBTUFS XIJDIJTJNQMFNFOUFEPOUIFQSFNJTFPG"3.5SVTU;POF w *OJ04

    TJNJMBSUP"3.5SVTU;POF UIFSFJTBTFDVSJUZQSPDFTTPSDBMMFE4FDVSF&ODMBWF XIJDIJTJOUIF"QQMF 5DIJQ w 4FDVSF&ODMBWFNBOBHFTEBUBGPS5PVDI*%BOE'BDF*% EJTLFODSZQUJPOXJUI'JMF7BVMU BOE'BJS1MBZLFZ NBOBHFNFOU5IJT4FDVSF&ODMBWFJTOPUBDDFTTJCMFGSPNUIFBQQBUBMMBOEJTVQEBUFEXJUIUIFJ04WFSTJPO

  29. Vulnerability of TEE w 5&&JTBOJTPMBUFEFYFDVUJPOGVODUJPOJOUIF$16 CVUTJODFJUEPFTOPUQIZTJDBMMZBMMPDBUFDPSFT JUJTTBJEUP IBWFNBOZWVMOFSBCJMJUJFT w 'PSFYBNQMF

    1SJNF 1SPCF XIJDIFYQMPJUTDBDIFTIBSJOH JTLOPXOUPCFFGGFDUJWFPO*OUFM4(9 BOEBO BUUBDLDBMMFE'PSF4IBEPXDBOCFDBSSJFEPVUCZDPNCJOJOHDBDIFTIBSJOHBOETQFDVMBUJWFFYFDVUJPO KVTU MJLF4QFDUSF XIJDIXBTBIJHIMZQVCMJDJ[FE$16WVMOFSBCJMJUZ w "MTP 5&&JTOPUSFTJTUBOUUP4JEF$IBOOFMBUUBDLT"TZPVDBOTFF 5&&BMTPIBTWVMOFSBCJMJUJFT BOEJUJT JNQPSUBOUUPXPSLXJUI3PPUPG5SVTUUPSFEVDFUIFSJTLBTNVDIBTQPTTJCMF

  30. Decrypt of DRM

  31. About Common-key Cryptography w %3.VTFTTZNNFUSJDLFZDSZQUPHSBQIZ XIFSFUIFLFZTVTFEGPSFODSZQUJPOBOEEFDSZQUJPOBSFUIFTBNF 4JODFTZNNFUSJDLFZDSZQUPHSBQIZDBOCFFBTJMZEFDSZQUFEJGUIFLFZJTMFBLFE JUJTJNQPSUBOUUPEJTUSJCVUF UIFLFZXJUIPVUMFBLJOHJU w

    *OBEEJUJPO QSPDFTTJOHTQFFEJTBLFZGBDUPSGPSTZNNFUSJDLFZDSZQUPHSBQIZ w 5IFSFBSFUXPUZQFTPGTZNNFUSJDLFZDJQIFSTCMPDLDJQIFSTBOETUSFBNDJQIFST

  32. Block Cipher w #MPDLDJQIFSJTBNFUIPEPGFODSZQUJOHQMBJOUFYUCZHSPVQJOHJUJOUPTFWFSBMCMPDLTPGBDFSUBJOTJ[F CMPDLT  5IFDJQIFSUFYUJTUIFTBNFTJ[FBTUIFQMBJOUFYU w 5PFODSZQUQMBJOUFYUUIBUJTMBSHFSUIBOUIFCMPDLTJ[F XFVTFXIBUJTDBMMFEFODSZQUJPONPEF

    w 4JODFCMPDLDJQIFSTBSFQSPDFTTFECZTFQBSBUJOHUIFN UIFQSPDFTTJOHMPBEJTOPUMBSHF w "TBUZQJDBMFYBNQMF "&4DJQIFSTBSFUIFNPTUDPNNPO

  33. Stream Cipher w *ODPOUSBTUUPCMPDLDJQIFST TUSFBNDJQIFSTBSFDSZQUPHSBQIJDNFUIPETUIBUTFRVFOUJBMMZQSPDFTTQMBJOUFYUJO TNBMMVOJUT w 5IFGFBUVSFPGTUSFBNDJQIFSTJTUIBUUIFZQFSGPSNFODSZQUJPOBOEEFDSZQUJPOCZUBLJOHUIFFYDMVTJWFMPHJDBM 03 903

    PGUIFQMBJOUFYUBOEUIFLFZ w $PNQBSFEUPCMPDLDJQIFST TUSFBNDJQIFSTBSFGBTUFSCVUMFTTFG fi DJFOUCFDBVTFUIFZBSFQSPDFTTFEJOTNBMMFS VOJUT TPUIFSFBSFBEWBOUBHFTBOEEJTBEWBOUBHFT w 4USFBNDJQIFSTBSFVTFEGPSFODSZQUJPOJOXJSFMFTT-"/T w 5IFTFUXPNFUIPETDBOCFVTFEUPFODSZQUTZNNFUSJDLFZDJQIFST CVUJGUIFPVUQVUSFTVMUJTUIFTBNFFBDI UJNF UIFSFJTBSJTLPGCFJOHHVFTTFEGSPNUIFSF

  34. IV w 5PQSFWFOUUIJT BO*7 *OJUJBMJ[BUJPO7FDUPS JTVTFE XIJDIJTBSBOEPNTFRVFODFPGCJUTJOTFSUFEJOCFUXFFO UPNBLFUIFEBUBIBSEFSUPEFDJQIFS DIBOHJOHUIFPVUQVUSFTVMUFBDIUJNFUPQSFWFOUHVFTTJOH w

    *OUIFDBTFPGCMPDLDJQIFST UIF*7SFGFSTUPUIFQMBJOUFYUBOEUIFQSFWJPVTFODSZQUFECMPDL BOEUIFSFTVMU PGUIF903CFDPNFTUIFDJQIFSUFYUPGUIFOFYUCMPDL5IF*7JTVTFEXIFOFODSZQUJOHGPSUIF fi STUUJNF w *OUIFDBTFPGTUSFBNDJQIFST BQTFVEPSBOEPNOVNCFSHFOFSBUPS 4FFE JTVTFEUPDSFBUFUIFDJQIFSUFYU  BOE*7JTVTFEUPFMJNJOBUFUIFCJBTPGUIF4FFE w 5IJTJTIPXTZNNFUSJDLFZDSZQUPHSBQIZXPSLT BOEUIFSFBSFTFWFSBMUZQFTPG%3.UIBUVTFUIJTNFDIBOJTN GPSFODSZQUJPO

  35. CBR w 'JSTUPGBMM MFUTUBMLBCPVU$#$ $JQIFS#MPDL$IBJOJOH XIJDIJTBCMPDLDJQIFSTDIFNFUIBU fi STU903TXJUI *7 UIFO903TUIFQSFWJPVTDJQIFSCMPDLXJUIUIFQMBJOUFYUCMPDL

    BOETPPOVOUJMUIFFOE w 4JODF$#$JTCBTFEPOUIFQSFWJPVTCMPDL QBSBMMFMQSPDFTTJOHJTOPUQPTTJCMF BOEJGUIFCMPDLTJ[FJTOPUNFU  UIFEBUBNVTUCF fi MMFEXJUIQBEEJOH

  36. CTR w /FYU MFUTUBMLBCPVU$53 $06/5FS XIJDIBMTPVTFTBCMPDLDJQIFS CVUQSFQBSFTBDPVOUFSUIBUJODSFNFOUT CZPOF FODSZQUTJU BOE903TUIFPVUQVUDJQIFSUFYUXJUIUIFQMBJOUFYUCMPDL5IJTBMMPXTUIFCMPDLDJQIFSUP

    CFUSFBUFEBTBTUSFBNDJQIFS BOETJODFOPQBEEJOHPSPUIFSQSPDFTTJOHJTSFRVJSFE JUIBTHPPEQFSGPSNBODF BOEDBOCFFYFDVUFEJOQBSBMMFM w $53VTFTBEJTQPTBCMFSBOEPNOVNCFSDBMMFEBOPODFBTBDPVOUFS XIJDIQSFWFOUTUIFSFTVMUGSPNCFJOH fi YFE

  37. AES-128 w 5IF fi STUPOFJT"&4"TUIFOBNFTVHHFTUT UIJTFODSZQUTXJUI"&4BOEVTFTFJUIFS$#$PS$53BT UIFFODSZQUJPONPEF5IJTJTTJNQMFBOEFBTZUPVOEFSTUBOE

  38. SAMPLE-AES w /FYU MFUTUBMLBCPVU4".1-&"&44".1-&"&4FODSZQUTOPUUIFFOUJSFEBUB CVUPOMZBQBSUPGJU XIJDI TQFFETVQUIFQSPDFTTJOHBOESFEVDFTUIFMPBE w 4".1-&"&4JTBMTPDBMMFE$#$4 XIJDIVTFT$#$GPSFODSZQUJPO

  39. MPEG-CENC w /FYU MFUTUBMLBCPVU.1&($&/$ $PNNPO&ODSZQUJPO4DIFNF XIJDIJTBDPNNPOFODSZQUJPOTDIFNF EFWFMPQFECZ.1&(.1&($&/$JTBDPNNPOFODSZQUJPONFUIPEEFWFMPQFECZ.1&(

  40. About FairPlay's Work f low

  41. About FairPlay's Work f low  5IFVTFSPQFOTUIFBQQBOETUBSUTQMBZJOHUIF'BJS1MBZ4USFBNJOHDPOUFOU  "7'PVOEBUJPOQSFQBSFTUPTUBSUQMBZCBDL 

    "7'PVOEBUJPOXJMMGFUDIUIF)-4NBOJGFTU fi MFGSPNUIFTQFDJ fi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

  42. About FairPlay Streaming's Crack w )PXFWFS UIFSFJTOPUIJOHUIBUDBOCFEPOFBHBJOTUBKBJMCSFBL BMUIPVHIJUJTQPTTJCMFUPPCUBJOUIFDPOUFOU LFZTTUPSFEJOTJEFUIFEFWJDFPODFSPPUQSJWJMFHFTBSFPCUBJOFE w

    *OBEEJUJPOUPKBJMCSFBLJOH UIFSFBSFTFWFSBMPUIFSNFUIPETB1P$DBMMFE1TZDIJD1BQFSSFMFBTFEJO.BZ BMMPXTVTFSTUPPCUBJODPOUFOULFZTGPSEFWJDFTSVOOJOHJ04PSMPXFS*UVTFTBWVMOFSBCJMJUZJO UIFDPEFOBNFBOEFYUSBDUTUIFDPOUFOULFZCZVTJOHBNFUIPEUIBUDIFDLTGPSBTQFDJ fi DFOUJUMFNFOU LFZ JO BQSPDFTTDBMMFE*05BTL)BT&OUJUMFNFOUJO9/6 %BSXJO,FSOFM )PXFWFS JUJTJNQPTTJCMFGPSNPTUVTFSTUPHFU UPUIJTQPJOU TPBTBEFWFMPQFSJNQMFNFOUJOH'BJS1MBZ4USFBNJOH ZPVDBOTBGFMZJHOPSFJU3FNFNCFS  IPXFWFS UIBUQFSGFDUJPOEPFTOPUFYJTU

  43. Widevine w 8JEFWJOFJTFODSZQUFEVTJOH.1&($&/$ XIJDISFRVJSFTUIFVTFPG"&4$53BTUIFFODSZQUJPOTDIFNF w 5IFSFBSFUXPUZQFTPG8JEFWJOF 8JEFWJOF$MBTTJDGPSMFHBDZEFWJDFTBOE8JEFWJOF.PEVMBSXIJDIJTDVSSFOUMZ JOVTF w *OPSEFSUPVOEFSTUBOE8JEFWJOF

    UIFSFBSFTPNFBEEJUJPOBMUIJOHTZPVOFFEUPLOPX

  44. CDM w 'JSTU MFUTUBMLBCPVU$%. XIJDITUBOETGPS$POUFOU%FDSZQU.PEVMF UIFNPEVMFUIBUIBOEMFT8JEFWJOF5IF $%.JTCVJMUJOUPFWFSZCSPXTFS CVUUIFTPVSDFDPEFJTOPUQVCMJD w #ZUIFXBZ

    JUJTFBTZUPDIFDLJGB$%.JTQSFTFOUPSOPU'PSFYBNQMF JO(PPHMF$ISPNF USZUZQJOHDISPNF DPNQPOFOUTJOUIFBEESFTTCBSBOEQSFTTFOUFS*GZPVTFF8JEFWJOF$POUFOU%FDSZQUJPO.PEVMFJOUIFMJTU  ZPVDBOCFTVSFUIBUJUJTUIFSF w *OBEEJUJPOUP(PPHMF$ISPNF BMMNBKPSCSPXTFSTTVDIBT.P[JMMB'JSFGPYBOE.JDSPTPGU&EHFIBWFUIJT$%. *ODJEFOUBMMZ JGZPVBSFVTJOH$ISPNJVN JUNBZOPUCFJODMVEFE w 5IFSPMFPGUIF$%.JTUPSFRVFTUBMJDFOTF TUPSFUIFEFDSZQUJPOLFZTBGFMZ QSFWFOUFYUFSOBMBDDFTTUPUIF EFDSZQUFEDPOUFOU PVUQVUUIFWJEFPUPBTFDVSFPVUQVUEFWJDF BOETPPO

  45. EME w 8FIBWFFYQMBJOFEUIBUUIF$%.JTSFTQPOTJCMFGPSUIFNBJOQSPDFTTJOHPG8JEFWJOF5IF$%.JTBDUVBMMZ VQEBUFEQFSJPEJDBMMZBOEDIBOHFTGSFRVFOUMZ#FDBVTFPGUIJT JUJTOPUWFSZQSBDUJDBMUPDBMMUIF$%.GSPNUIF QMBZFS w 5PEFBMXJUIUIJT UIFSFJTBOBCTUSBDUJPOMBZFSDBMMFE&ODSZQUFE.FEJB&YUFOTJPOT &.&

    XIJDIQSPWJEFTBO "1*GPSQMBZFSTUPDPNNVOJDBUFXJUI$%. TPUIBUQMBZFSTDBOJOUFSBDUXJUI$%.CZIJUUJOHUIF&.&"1*5IF DPOUFOUPGUIJT&.&JTB+BWB4DSJQU"1* w &.&JTB8$TUBOEBSE TPJUJTWFSZFBTZUPVTF

  46. About Widevine's Work f low

  47. About Widevine's Work f low  5IFVTFSPQFOTUIFBQQBOETUBSUTQMBZJOHUIF8JEFWJOFDPOUFOU5IFBQQGFUDIFTUIF.1&(%"4)NBOJGFTU fi MF BOEQBSTFTJU*UUIFOWFSJ

    fi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

  48. About Widevine's Crack w 0OFPGUIFNPTUXFMMLOPXOWVMOFSBCJMJUJFTJO8JEFWJOFJTUIF8JEFWJOF-FWFMWVMOFSBCJMJUZEJTDPWFSFEJO +BOVBSZ*UJTEVFUPBQSPCMFNJO8*EFWJOFT"&4JNQMFNFOUBUJPOUIBUBUUFNQUTUPEFDSZQU FODSZQUFENFTTBHFTCZOBSSPXJOHEPXODBOEJEBUFTFDSFULFZTCBTFEPOUIFEJGGFSFODFCFUXFFODPSSFDUBOE FSSPOFPVTDJQIFSUFYUVTJOHBOBUUBDLDBMMFE%JGGFSFOUJBM'BVMU"OBMZTJT %'" 

    w "TNFOUJPOFEBUUIFCFHJOOJOHPGUIJTBSUJDMF 8JEFWJOF-FWFMJTQFSGPSNFEJOBMBZFSUIBUJTOPUQSPUFDUFE CZ5&&5IJTNFBOTUIBUJUJTWFSZWVMOFSBCMFUPFYUFSOBMBUUBDLT*UJTBMTPTBJEUIBUUIFTFWVMOFSBCJMJUJFTBSF OPUMJLFMZUPCF fi YFEBTUIFZBSFQSPCMFNTJOUIF8JEFWJOFTQFDJ fi DBUJPO w )PXFWFS XJUI-FWFM )%DPOUFOUDBOOPUCFQMBZFE SFTVMUJOHJOMPXSFTPMVUJPOWJEFP&WFOJGJUDPVMECF EFDSZQUFE UIFRVBMJUZXPVMECFTPQPPSUIBUJUXPVMECFFOPVHIUPXBUDI w 8JEFWJOFJTUIVTBUSJTLPGCFJOHWVMOFSBCMF)PXFWFS 8JEFWJOFBMMPXTEFWFMPQFSTUPTQFDJGZUIFUPMFSBODF MFWFM*OUIJTDBTF -FWFMXBTUBSHFUFE CVUJUJTQPTTJCMFUPBWPJEUIJTEBOHFSCZTFUUJOHPOMZ-FWFMBOE -FWFM

  49. About Widevine's Crack w *OBEEJUJPOUPUIJTWVMOFSBCJMJUZ UIFSFBSFNBOZPUIFSQSPCMFNTXJUI8JEFWJOFUIBUDBOOPUCFTPMWFECZUIF TQFDJ fi DBUJPO'PSFYBNQMF DBQUVSFQSFWFOUJPO

    w *O8JEFWJOF *NFOUJPOFEFBSMJFSUIBU$%.BMTPIBOEMFTUIFWJEFPQSPDFTTJOH CVUUFDIOJDBMMZ $%.JT SFTQPOTJCMFGPSQBTTJOHUIFEFDSZQUFESBXEBUBUPUIFWJFXFS*OPUIFSXPSET UIFQMBZCBDLJUTFMGJTOPUVOEFS UIFKVSJTEJDUJPOPG$%.5IFSFGPSF TDSFFOTIPUTBSFQPTTJCMF)PXFWFS XIFOJUDPNFTUPTDSFFODBQUVSF $%. IJUTUIF04"1* BOEXIFOZPVDBQUVSF UIFWJEFPJUTFMGJTSFDPSEFEJOCMBDL CVUUIFBVEJPDBOCFDBQUVSFEBT JT w "TZPVDBOTFF 8JEFWJOFJUTFMGJTRVJUFJNQFSGFDU5IFSFGPSF JUJTOFDFTTBSZUPJNQMFNFOUBXBZUPQSFWFOU UIFWJEFPGSPNCFJOHFYUSBDUFEPOUIFBQQMJDBUJPOTJEFJOBDDPSEBODFXJUI8JEFWJOF w 'PSFYBNQMF JOUIFDBTFPG"OESPJE JUJTQPTTJCMFUPVTF4FDVSF'MBHUPQSFWFOUTDSFFOTIPUTGSPNCFJOHUBLFO JOUIF fi STUQMBDF#ZBQQMZJOHUIFTFNFUIPET JUJTQPTTJCMFUPQSFWFOUDBQUVSFDPNQMFUFMZ)PXFWFS UIJTJT POMZGPSOBUJWFBQQMJDBUJPOT TPJUXJMMOPUXPSLGPSCSPXTFST

  50. PlayReady w 1MBZ3FBEZJTUIFMFBTUVTFEPGUIFNBKPS%3.TZTUFNT CVUJUJTBDUVBMMZVTFEJOTPNFDBTFTJO"OESPJE BOE TJODFPOMZ1MBZ3FBEZJTTVQQPSUFEGPSQMBZCBDLJO*OUFSOFU&YQMPSFS UIFSFBSFNBOZDBTFTXIFSFJUJTVTFE VOFYQFDUFEMZ w 5IJT1MBZ3FBEZXBTPSJHJOBMMZDSFBUFEJOBQMVHJOGPSWJEFPQMBZCBDLDBMMFE.JDSPTPGU4JMWFSMJHIU"MUIPVHI

    4JMWFSMJHIUJTOPMPOHFSJOVTF UIF1MBZ3FBEZNFDIBOJTNSFNBJOTBOEJTTUJMMJOVTF w 1MBZ3FBEZ IPXFWFS TVQQPSUTCPUI$53BOE$#$DJQIFSTVJUFT TPZPVDBOVTFFJUIFSPOFXJUIPVUBOZ QSPCMFNT w 0OFPGUIFNBJOGFBUVSFTPG1MBZ3FBEZJTJUTBDDPVOUUBLJOHDBQBCJMJUZ5IJTJTRVJUFTJNJMBSUPUIFDPODFQUPG "DUJWF%JSFDUPSZ XIFSFUIFSFJTBMTPBDPODFQUDBMMFEBEPNBJODPOUSPMMFS%PNBJODPOUSPMMFSTBMMPXMJDFOTFT UPCFTIBSFEBDSPTTNVMUJQMFEFWJDFT5IFSFJTBMTPBDPODFQUDBMMFEBNFUFSJOHTFSWFS XIJDIBMMPXTUIFDMJFOU TJEFUPTUPSFUIFOVNCFSPGQMBZT5IFOVNCFSPGUJNFTBWJEFPJTQMBZFEDBOCFTFOUUPUIFTFSWFS XIJDIDBO CFVTFEUPJNQMFNFOUBTZTUFNUIBUDIBSHFTGPSUIFOVNCFSPGUJNFTBWJEFPJTXBUDIFE

  51. PlayReady Work f low

  52. About PlayReady's Work f low  *OUIFDBTFPG1MBZ3FBEZ JUTUBSUTXJUIFODSZQUJOHUIFDPOUFOU'JSTU UIFQBDLBHFEDPOUFOUJTFODSZQUFE BOE

    UIFOUIFDPOUFOUJTQMBDFEJO4PSTPNFPUIFSMPDBUJPO"UUIJTQPJOU UIFMJDFOTFLFZBOEFODSZQUJPOLFZBSFTFOU UPUIFMJDFOTFTFSWFS BOEUIFEPNBJOJOGPSNBUJPOJTTFOUUPUIFEPNBJOTFSWFS  8IFOUIFBQQQMBZTUIF1MBZ3FBEZDPOUFOU JUGFUDIFTUIFNBOJGFTUBOEDIFDLTJGJUJTFODSZQUFECZ1MBZ3FBEZ*G JUJTFODSZQUFE JUTFOETUIFJOGPSNBUJPOUP1MBZ3FBEZT$%.UISPVHI&.&5IJT fl PXJTTJNJMBSUP8JEFWJOFUIF $%.DSFBUFTBMJDFOTFSFRVFTUBOEQBTTFTUIFSFRVFTUUPUIFQMBZFSTJEFUISPVHIUIF&.&5IFQMBZFSTFOETUIF MJDFOTFSFRVFTUUPUIFMJDFOTFTFSWFS5IFQMBZFSTFOETUIFMJDFOTFSFRVFTUUPUIFMJDFOTFTFSWFS XIJDIBMTPTFOET UIF,FZ*% BVOJRVFWBMVF (6*% BTTPDJBUFEXJUIFBDIQJFDFPGDPOUFOU  5IFMJDFOTFTFSWFSSFDFJWFTUIFSFRVFTUBOEVTFTUIF,FZ*%UP fi OEUIFDPSSFTQPOEJOHMJDFOTF*GUIFSFJTB DPSSFTQPOEJOHMJDFOTF JUFODSZQUTUIFLFZUPEFDSZQUUIFDPOUFOUBOEUIFMJDFOTFJOGPSNBUJPOBOETFOETJUUPUIF BQQ  5IFBQQSFDFJWFTUIFFODSZQUFESFRVFTUGSPNUIFMJDFOTFTFSWFSBOEQBTTFTJUUPUIF$%.WJB&.&  5IF$%.VTFTBIBSEXBSFDPNQPOFOUUPEFDSZQUUIFFODSZQUFESFRVFTU FYUSBDUTUIFLFZOFFEFEUPEFDSZQUUIF DPOUFOUGSPNJU BOEEFDSZQUTUIFDPOUFOU*OEPJOHTP JUBMTPQSPWJEFTUIFDMJFOUXJUIBMJDFOTFTUPSFUPTUPSFUIF EFDSZQUFELFZT

  53. Advantages of PlayReady over Widevine w 1MBZ3FBEZJTTJNJMBSUP8JEFWJOF BOEBMTPEPFTOUIBWFNBOZBEWBOUBHFTOPXUIBU.JDSPTPGU&EHFIBTCFFO $ISPNJVNJ[FE CVUJUTJOUFHSBUJPOXJUIUIF04JTWFSZTUSPOH

    BOE1MBZ3FBEZBMMPXTZPVUPEPUIJOHTMJLF QSFWFOUDBQUVSF XIJDIXBTBESBXCBDLPG8JEFWJOF XJUIPVUDIBOHJOHJU w *OGBDU /FU fl JYVTFT1MBZ3FBEZJOTUFBEPG8JEFWJOFXIFOXBUDIJOHPO.JDSPTPGU&EHF JOEJDBUJOHUIBU 1MBZ3FBEZJTNPSFTFDVSFUIBO8JEFWJOFXIFOUBSHFUJOH8JOEPXTVTFST w "MTP JOUIFDBTFPG1MBZ3FBEZ TJODFJUJTIBOEMFECZUIF8JOEPXT3VOUJNF"1* 8JO35 JUJTVMUJNBUFMZ IBOEMFECZUIF/5LFSOFM4P UIFSFJTOPOFFEUPXPSSZBCPVUCFJOHFYUSBDUFEGSPNUIFPVUTJEF

  54. Hardware Security

  55. About Android Media Services w "OESPJEIBTIBENBOZWVMOFSBCJMJUJFTJOUIFQBTU NBOZPGXIJDIBSFSFMBUFEUPNVMUJNFEJB%FDPEJOHBO BSCJUSBSZWJEFP fi MFDBODBVTFBCVGGFSPWFS

    fl PXUIBUDBOCFVTFEUPFYFDVUFBSCJUSBSZDPEF XIJDIIBTCFFOB QSPCMFN w *OSFTQPOTF (PPHMFIBTNPWFETFSWJDFTUIBUIBOEMFTPGUXBSFDPEFDTUPBDPOTUSBJOFETBOECPY TUBSUJOHXJUI "OESPJE SFMFBTFEJO w 5IJTJNQSPWFETFDVSJUZCZJTPMBUJOHUIFWBSJPVTDPNQPOFOUTJOUPBTBOECPYXIFSFUIFZDPVMEOPUSVOXJUI QSJWJMFHFT w *OUIJTDPOTUSBJOFETBOECPY QSPDFTTFTSVOXJUIJOTUSVDUJPODBMMSFTUSJDUJPOTBOEJOUIF4&-JOVYEPNBJO'PS UIFJOTUSVDUJPODBMMSFTUSJDUJPO XFVTFTFDDPNQ BGFBUVSFPGUIF-JOVY,FSOFM w *OBEEJUJPO .FEJB$PEFDBOE.FEJB&YUSBDUPS XIJDIQSFWJPVTMZSFRVJSFE04VQEBUFT DBOOPXCFQBSUJBMMZ VQEBUFE5IJTJTBQBSUJBMVQEBUFUP.FEJB$PEFDBOE.FEJB&YUSBDUPS XIJDIVTFEUPSFRVJSFBO04XJEF VQEBUFUPBEESFTTWVMOFSBCJMJUJFTJO"OESPJEBOEFBSMJFS

  56. History of Android privileges w "OESPJE2TUBOETGPS "OESPJE01GPS "OESPJE/ GPS BOE"OESPJE.GPS

    w 1SJPSUP"OESPJE NFEJBTFSWFSXBTBTJOHMFQSPDFTTGPS NFEJBIBOEMJOH XJUIPOMZ&YUSBDUPSSVOOJOHTFQBSBUFMZ w 8JUI"OESPJE UIJTIBTCFFOSFEFTJHOFEBOEFBDI QSPDFTTJTOPXTQMJUJOUPTFQBSBUFQSPDFTTFT5IJTXBTUIF fi STUUJNFUIF&YUSBDUPSXBTQMBDFEJOBDPOTUSBJOFE TBOECPY w /FYUDBNF"OESPJE XJUIFWFONPSFDPOTUSBJOUT4JODF UIFSFBSFOPDIBOHFTJO"OESPJE UIFZBSFTIPXO UPHFUIFSJOUIJT fi HVSF

  57. History of Android privileges w "OEUIFOUIFSFJT"OESPJE)FSFUIFTPGUXBSFDPEFDT IBWFCFFOTFQBSBUFEGSPN.FEJB$PEFDBOESFUVSOFEUPUIF TZTUFNTJEF)FSF 4&-JOVYBOETFDDPNQQPMJDJFTIBWF CFFOHSFBUMZTUSFOHUIFOFE

    BOEOPXTPGUXBSFDPEFDTBSF OPUBMMPXFEUPBDDFTTEFWJDFESJWFSTUIBUQSFWJPVTMZ IBOEMFEDPEFDTGPSIBSEXBSFBDDFMFSBUJPO5IJTJOJUJBUJWFJT QBSUJDVMBSMZFGGFDUJWFCFDBVTFTPGUXBSFDPEFDT USBEJUJPOBMMZVTFBWBSJFUZPGMJCSBSJFTUPQBSTFCJUTUSFBNT GSPNVOUSVTUFETPVSDFT5IJTXBTBCSFFEJOHHSPVOEGPS WVMOFSBCJMJUJFT CVUCZSFTUSJDUJOHUIFVTFPGDPOTUSBJOFE TBOECPYFTBOEMJNJUJOHBDDFTTUPEFWJDFESJWFST XFXFSF BCMFUPTJHOJ fi DBOUMZSFEVDFUIFWVMOFSBCJMJUJFT w *OUIJTXBZ XIFOQSPDFTTJOHJTEPOFJOIBSEXBSF TFDVSJUZ JTFOTVSFECZSFTUSJDUJOHUIFCFIBWJPS

  58. Implement Security Sandbox using Unikernel

  59. The relationship between 
 FFmpeg and Libav w ''NQFHXBTPODFTQMJUJOUPBTPGUXBSFDBMMFE-JCBWJO .BSDIEVFUPDPO

    fl JDUTJOUIFEFWFMPQNFOUTUSVDUVSF "UUIFUJNF %FCJBOBEPQUFE-JCBW BOEUIFSFXBTBCJH GVTTBCPVUJU w )PXFWFS JO+VMZ %FCJBOBOOPVODFEUIBUUIFZXFSF HPJOHCBDLUP''NQFH5IFSFBTPOGPSUIFNPWFCBDLXBT UIBU''NQFHXBTGBTUFSUPEFWFMPQBOEGBTUFSUPBEESFTT WVMOFSBCJMJUJFT5IJTIBTMFEUPBUSFOECBDLUP''NQFH BOE -JCBWIBTTUPQQFESFMFBTJOHTJODFJUTSFMFBTFJO w *OFGGFDU XFWFHPOFCBDLUP''NQFH CVUUIFDPEFBEEFE JO-JCBWIBTOUNBEFJUJOUP''NQFHZFU w /PX UIFSFBTPOXIZ*NFOUJPOFE-JCBWIFSFJTCFDBVTF* XSPUF-JCBWJOVQQFSDBTF CVUUIFSFJTBMPXFSDBTFMJCBW

  60. about "libav" w 5IJTMJCBWEFOPUFTBMJCSBSZJO''NQFH4QFDJ fi DBMMZ UIF DPEFDMJCSBSZMJCBWDPEFD UIFDPOUBJOFSMJCSBSZMJCBWGPSNBU 

    BOEUIF fi MUFSMJCSBSZMJCBWGPSNBUBSFDPMMFDUJWFMZDBMMFE MJCBW w #BDLUPUIFUPQJDBUIBOE ''NQFHIBTBTFUPGMJCSBSJFT DBMMFEMJCBW5IJTTFUPGMJCSBSJFTJTVTFEFWFSZXIFSF

  61. About the license of FFmpeg w )PXFWFS JUJTJNQPSUBOUUPOPUFUIBUUIFSFBSFNBOZ VOPG fi

    DJBMDPEFDJNQMFNFOUBUJPOTJOMJCBWDPEFD.BOZPG UIFNBSFJNQMFNFOUFECZBOBMZ[JOHWJEFPPSBVEJP fi MFT PS CZBOBMZ[JOH%--TUIBUQSPWJEFDPEFDT BOEDBMDVMBUJOHUIF FODPEJOHQSPDFTTCBDLXBSETGSPNUIFSF w *OBEEJUJPO ''NQFHBTBXIPMFJTMJDFOTFEVOEFSUIF-(1-  XIJDIJODMVEFTMJCBW5IFSFGPSF JGZPVXBOUUPVTFJU DPNNFSDJBMMZ ZPVOFFEUPEJTDMPTFUIFTPVSDFDPEF*O BEEJUJPO JGZPVXBOUUPVTF.1&(SFMBUFEUFDIOPMPHJFT  ZPVOFFEUPQBZBMJDFOTFGFFUP.1&(-"

  62. Vulnerability of FFmpeg w 8FMM ''NQFHIBTBMPUPGWVMOFSBCJMJUJFT5IFSFBTPOXIZ UIFSFBSFTPNBOZJTUIBUUIFSFBSFNBOZUIJOHTJO''NQFH UIBUBSFOPUNBJOUBJOFE BOEBT*FYQMBJOFEFBSMJFS UIFTF

    BSFUIJOHTUIBUBSFJOUIFHSBZ[POF5IJTJTXIZ$7&TBSF GSFRVFOUMZJTTVFE CVUGSPNUIFTUBOEQPJOUPGEFWFMPQFST VTJOHMJCBW UIFSFBSFNBOZBEWBOUBHFTUPVTJOHMJCBWUP EFWFMPQVTFGVMTPGUXBSFXIJMFCFJOHBXBSFPGTFDVSJUZ w *UJTWFSZEJG fi DVMUUPNBJOUBJOBOEPQFSBUFBCBMBODF CFUXFFOUIFTFUXP w 5IJTJTXIZ*BEWPDBUFUIFBQQSPBDIPGSVOOJOHUIF TPGUXBSFPOBTFDVSJUZTBOECPYVTJOH6OJLFSOFM w 'JSTUPGBMM *XPVMEMJLFUPFYQMBJOBCPVU6OJLFSOFM

  63. Unikernel w 6OJLFSOFMJTBCVOEMFPGTQFDJ fi DBQQMJDBUJPOQSPHSBNT B TNBMM04KVTUUPSVOUIFN BOEUIFOFDFTTBSZDPO fi HVSBUJPO

    fi MFT w "MJCSBSZCBTFE04JTPOFJOXIJDI04GVODUJPOTBSF JNQMFNFOUFEBTMJCSBSJFT BMMPXJOHBQQMJDBUJPOTUPEJSFDUMZ BDDFTTIBSEXBSFXJUIPVUFYDIBOHJOHJOGPSNBUJPOCFUXFFO VTFSTQBDFBOELFSOFMTQBDF w )PXFWFS JOPSEFSUPBDDFTTIBSEXBSF BESJWFSNVTUCF XSJUUFOGPSUIFMJCSBSZCBTFE04 XIJDIJTBIFBWZCVSEFO w 5PTPMWFUIJTQSPCMFN 6OJLFSOFMJTBUFDIOPMPHZUIBUSVOT POBWJSUVBMFOWJSPONFOU

  64. Midori w 8IFOXFUBMLBCPVU6OJLFSOFM UIFSFJTPOFUIJOHUIBUXF TIPVMEOPUGPSHFU*UJTBQSPKFDUDBMMFE4JOHVMBSJUZUIBU .JDSPTPGU3FTFBSDIVTFEUPEPSFTFBSDIBOEEFWFMPQNFOU PO w 5IF4JOHVMBSJUZQSPKFDUIBTCFFOVOEFSSFTFBSDIBOE EFWFMPQNFOUGPSNPSFUIBOZFBST

    BOEJUTSFTVMUTIBWF DPOUSJCVUFEUPUIFEFWFMPQNFOUPGBOPQFSBUJOHTZTUFN DBMMFE.JEPSJ w )PXFWFS .JEPSJXBTOFWFSSFMFBTFEBOEJUXBTTBJEUIBU UIFQSPKFDUXBTQSBDUJDBMMZEJTCBOEFE w +PF%VGGZ BGPSNFSQSPKFDUNFNCFS UBMLFEBCPVU.JEPSJPO IJTCMPHJO/PWFNCFS TPJGZPVSFJOUFSFTUFEJOUIF QSPKFDU QMFBTFWJTJU+PFTCMPH

  65. MirageOS w .JSBHF04JTBMJCSBSZPQFSBUJOHTZTUFNUIBUDPOTUSVDUT VOJLFSOFMTGPSTFDVSF IJHIQFSGPSNBODFOFUXPSL BQQMJDBUJPOTBDSPTTBWBSJFUZPGDMPVEDPNQVUJOHBOE NPCJMFQMBUGPSNT$PEFDBOCFEFWFMPQFEPOBOPSNBM04 TVDIBT-JOVYPSNBD04 BOEUIFODPNQJMFEJOUPBGVMMZ TUBOEBMPOF

    TQFDJBMJTFEVOJLFSOFMUIBUSVOTVOEFSB9FOPS ,7.IZQFSWJTPS

  66. MirageOS w /PXUIBUXFIBWFUBMLFEBCPVU6OJLFSOFM *XPVMEMJLFUP UBMLBCPVUIPXUPBDUVBMMZSVO6OJLFSOFM w 8IFOXFSVO6OJLFSOFM XFOFFEUPUBLFDBSFPGTFDVSJUZ *UJTJNQPSUBOUUPLFFQBDDFTTUPBNJOJNVNJOPSEFSUP SFEVDFUIFSJTLPGFYUFSOBMBUUBDLT5IFTBNFDBOCFTBJE

    GPSSVOOJOHUIF6OJLFSOFM w 5IFTBNFDBOCFTBJEGPSSVOOJOHUIF6OJLFSOFM5IFSFJTB TPGUXBSFDBMMFE4PMPUIBUQSPWJEFTBOFOWJSPONFOUUIBUJT FBTZUPSVOXIJMFLFFQJOHUIFTFUIJOHTJONJOE

  67. Solo5 w 4PMPJTUIFTPGUXBSFUIBUNFEJBUFTCFUXFFOUIF04MBZFS BOEUIFQMBUGPSNMBZFS BOECZQSPWJEJOHBDPNNPO"1* UIBUJOUFSBDUTXJUIUIF04MBZFS UIF04MBZFSJUTFMGDBOSVO XJUIPVUSFHBSEUPUIFQMBUGPSN

  68. Solo5 w 5IFSFBSFBMTPUXPNBJOQMBUGPSNMBZFSTUIBU4PMPDBO VTF w 5IF fi STUPOFJTIWU )BSEXBSF7JSUVBMJ[FE5FOEFS XIJDI

    VTFT,7.GPS-JOVYBOEWNNGPS#4% w 5IFTFDPOEJTTQU 4BOECPYFE1SPDFTT5FOEFS TQUVTFT UIFTFDDPNQQPMJDZBTJO"OESPJE w 5IFNBJOEJGGFSFODFCFUXFFOIWUBOETQUJTUIBUIWUSVOT BTBWJSUVBMNBDIJOFCZFYDIBOHJOH"1*TXJUI,7. XIJMF TQUDBOSVOBTBTJOHMFQSPDFTTPO-JOVYCZSFTUSJDUJOH TZTUFNDBMMT

  69. Applied research using Unikernel w *BNVTJOHUIJT6OJLFSOFMJONZSFTFBSDIUPSVOUIFBQQMJDBUJPOJNQMFNFOUFEJOMJCBWBTNFOUJPOFEFBSMJFS &WFOJGBCVGGFSPWFS fl PXPDDVSTXIFOEFDPEJOHJMMFHBMWJEFPEBUB UIFIPTUTJEFJTQSPUFDUFECZ6OJLFSOFM

     TPUIFSFJTOPOFFEUPXPSSZBCPVUEBNBHFUPUIFIPTUTJEF

  70. Applied research using Unikernel w *OBEEJUJPO UIF6OJLFSOFMJTOPXCFJOHBDUJWFMZVTFEJO*P5EFWJDFT0SJHJOBMMZ TFDVSJUZJTWFSZJNQPSUBOUGPS *P5EFWJDFTCFDBVTFUIFZDPNNVOJDBUFXJUIUIF*OUFSOFUXJUIGFXSFTPVSDFT*UJTTBJEUIBUUIFTFDVSJUZPG *P5DBOCFHVBSBOUFFECZVTJOHUIF6OJLFSOFM

    BOESFTFBSDIPOUIJTUPQJDJTJOQSPHSFTT w *OUIFNVMUJNFEJBXPSME UIFSFBSFNBOZBSFBTUIBUBSFRVJUFDPOOFDUFEUP*P5'PSFYBNQMF JUJTJOWPMWFEJO NBOZBSFBTTVDIBTTVSWFJMMBODFDBNFSBT ESJWJOHSFDPSEFSTJODBST BOENPSFSFDFOUMZ UIFSNPHSBQIZUP NFBTVSFCPEZUFNQFSBUVSF)PXFWFS NVMUJNFEJBJTBWFSZUSBDUBCMFFOUSZQPJOUGPSBOBUUBDLFSUPCSFBLJO  BOEVQMPBEJOHWJEFPPSBVEJP fi MFTDBODBVTFUIFJOUFOEFECFIBWJPS*OPSEFSUPQSFWFOUUIFTFQSPCMFNT * XJMMCFDPOEVDUJOHGVUVSFSFTFBSDIVTJOHUIF6OJLFSOFM w "UUIFNPNFOU *BNPOMZBCMFUPSVOTPGUXBSFDPEFDT CVU*UIJOLJUXPVMECFJOUFSFTUJOHUPFWFOUVBMMZ TVQQPSU$6%"BOEIBSEXBSFDPEFDTBTXFMM

  71. Conclusion

  72. Conclustion w 5PEBZ *JOUSPEVDFEUIFUPQJDPGNVMUJNFEJBTFDVSJUZGSPNUIFQFSTQFDUJWFPGCPUITPGUXBSFBOEIBSEXBSF w *OQBSUJDVMBS *XPVMEMJLFUPUBMLBCPVUNZFGGPSUTVTJOH6OJLFSOFM XIJDIJTBQSPKFDUUIBU*IBWFCFFO XPSLJOHPOQFSTPOBMMZXJUIPVUBOZDPOOFDUJPOUPBDPNQBOZ CVUXIJDI*IPQFUPDPMMBCPSBUFXJUIWBSJPVT

    QFPQMFTPPO w *GZPVBSFJOUFSFTUFEJOUIJTQSPKFDU QMFBTFDPOUBDUNF*GZPVBSFJOUFSFTUFE QMFBTFDPOUBDUNFBOEMFUT XPSLUPHFUIFSUPDSFBUFBOJOUFSFTUJOHQSPKFDU

  73. Thank you!