Life with an Armored Phone and Its Mitigations
summary
Examines MTE (Memory Tagging Extension) as a memory-error detection technology, comparing its accuracy and performance to HWSan. Presents Android test results, reviews historical context including Sun SPARC, and discusses iPhone and Android mitigations; concludes with a personal account of living with a phone that has multiple mitigation technologies (three in this case).
AI-written summary · about
chapters (14)
- 0:00Introduction
- 1:05C/C++ vulnerabilities
- 3:58Exploit mitigation methods
- 5:45Compiler protections
- 8:19Memory Tagging Extension (MTE)
- 16:49MTE in practice
- 17:56Exploit writing challenges
- 20:21Code jump restrictions
- 22:29Code-flow Integrity (CFI)
- 23:33Stack and pointer protection
- 27:48Combining defenses
- 29:15Branch Target Injection (BTI)
- 31:44Rust in Android
- 33:09Q&A
related talks
37mARM MTE: The End Of Memory Corruption? Not Yet
29mARMageddon: Cache Attacks on Mobile Devices
53mAndroid: He protec, but he also attac
40mIntegrating Mobile Devices into your Penetration Testing Program
53mThe Art of Defense - How Vulnerabilities Help Shape Security Features and Mitigations in Android
29mFixing Mobile AppSec
40mBest practices for shielding mobile apps from emerging threats
49mContain Yourself: Building Secure Containers for Mobile Devices