This presentation will demonstrate that permanent backdooring of hardware is practical. We have built a generic proof of concept malware for the intel architecture, Rakshasa, capable of infecting more than a hundred of different motherboards. The first net effect of Rakshasa is to disable NX permanently and remove SMM related fixes from the BIOS, resulting in permanent lowering of the security of the backdoored computer, even after complete earasing of hard disks and reinstallation of a new operating system. We shall also demonstrate that preexisting work on MBR subvertions such as bootkiting and preboot authentication software bruteforce can be embedded in Rakshasa with little effort. More over, Rakshasa is built on top of free software, including the Coreboot project, meaning that most of its source code is already public. This presentation will take a deep dive into Coreboot and hardware components such as the BIOS, CMOS and PIC embedded on the motherboard, before detailing the inner workings of Rakshasa and demo its capabilities. It is hoped to raise awareness of the security community regarding the dangers associated with non open source firmwares shipped with any computer and question their integrity. This shall also result in upgrading the best practices for forensics and post intrusion analysis by including the afore mentioned firmwares as part of their scope of work.
This presentation will demonstrate that permanent backdooring of hardware is practical. We have built a generic proof of concept malware for the intel architecture, Rakshasa, capable of infecting more than a hundred of different motherboards. The first net effect of Rakshasa is to disable NX permanently and remove SMM related fixes from the BIOS, resulting in permanent lowering of the security of the backdoored computer, even after complete earasing of hard disks and reinstallation of a new operating system. We shall also demonstrate that preexisting work on MBR subvertions such as bootkiting and preboot authentication software bruteforce can be embedded in Rakshasa with little effort. More over, Rakshasa is built on top of free software, including the Coreboot project, meaning that most of its source code is already public. This presentation will take a deep dive into Coreboot and hardware components such as the BIOS, CMOS and PIC embedded on the motherboard, before detailing the inner workings of Rakshasa and demo its capabilities. It is hoped to raise awareness of the security community regarding the dangers associated with non open source firmwares shipped with any computer and question their integrity. This shall also result in upgrading the best practices for forensics and post intrusion analysis by including the afore mentioned firmwares as part of their scope of work.
Professori Otto Toivasen puheenvuoro VATT-päivässä 11.10.2017:
- talouskasvu ja monet muut hyvät asiat riippuvat tuottavuuden kasvusta
- ihmiset ja heidän ideansa ovat tuottavuuskasvun lähteitä
- koulutus luo edellytyksiä ideoille
- pienelle taloudelle on keskeistä kyky hyödyntää muualla tuotettua tietoa
- tärkeää, että toimintaympäristö sallii resurssien kasautumisen ja uudelleensuuntautumisen
- koulutus ja pääsy koulutukseen ovat avainasemassa
VATT-päivän ohjelman ja kaikki esitykset löytyvät täältä:
http://vatt.fi/artikkeli/-/asset_publisher/11-10-koulutus-100-vuotiaan-suomen-muokkaajana
Pruebas de las Olimpíadas Juveniles de Matemática en Venezuela, aplicadas a estudiantes de bachillerato en el año 2011. Incluye las soluciones a los problemas.
Professori Otto Toivasen puheenvuoro VATT-päivässä 11.10.2017:
- talouskasvu ja monet muut hyvät asiat riippuvat tuottavuuden kasvusta
- ihmiset ja heidän ideansa ovat tuottavuuskasvun lähteitä
- koulutus luo edellytyksiä ideoille
- pienelle taloudelle on keskeistä kyky hyödyntää muualla tuotettua tietoa
- tärkeää, että toimintaympäristö sallii resurssien kasautumisen ja uudelleensuuntautumisen
- koulutus ja pääsy koulutukseen ovat avainasemassa
VATT-päivän ohjelman ja kaikki esitykset löytyvät täältä:
http://vatt.fi/artikkeli/-/asset_publisher/11-10-koulutus-100-vuotiaan-suomen-muokkaajana
Pruebas de las Olimpíadas Juveniles de Matemática en Venezuela, aplicadas a estudiantes de bachillerato en el año 2011. Incluye las soluciones a los problemas.
CIMAT Filtrado no lineal con partículas estocásticasOmar Sosa-Tzec
Tesis de Maestría de Omar Sosa Tzec. Filtrado no lineal de imágenes mediante un sistema de creación y muerte de partículas.
Maestría en Ciencias con especialidad en Cómputo y Matemáticas Industriales en el Centro de Investigación en Matemáticas (CIMAT), localizado en Guanajuato, México.
---
Master's thesis from Omar Sosa Tzec. Non linear image filtering by a creation and death particle system.
Master in Science in Computing and Industrial Mathematics from the Center for Research in Mathematics (CIMAT), located in Guanajuato, México.
Um Estudo Sobre Cidades Inteligentes e Cloud Computing Funcionando Como Redes...Daniel Pettini
Trabalho de conclusão de curso produzido e apresentado por Daniel Pettini ao colegiado do curso de Engenharia da Computação da Faculdade de Ciência e Tecnologia - Área1.
S. Buraga, G. Ciobanu: 'Atelier de programare în rețele de calculatoare' (2001)Sabin Buraga
Varianta electronică a volumului "Atelier de programare în rețele de calculatoare" (Polirom, 2001) oferind o inițiere utilă în programarea rețelelor de calculatoare utilizând interfața socket BSD (Berkeley System Distribution), în măsură să contribuie la formarea unei culturi profesionale adecvate cerințelor software actuale.
Din cuprins: Unix și Linux, gestiunea fișierelor, procese, semnale, comunicarea între procese, interfața socket, modelul client/server TCP și UDP, multiplexarea intrărilor/ieșirilor, RPC (apelul procedurilor la distanță), utilizarea bibliotecii MySQL.
Pentru detalii, a se vizita http://profs.info.uaic.ro/~lrc/
