A SysCall to ARMs

Presented at DerbyCon 3.0 All in the Family (2013), Sept. 29, 2013, noon (50 minutes).

ARM processors are growing more and more prevalent in the world; ARM itself claims that more than 20 billion chips have been shipped. Take a moment to appreciate that is about three chips for every man, woman, and child on earth.

The three main topics I aim to cover are (1) how to perform a Linux system call on an ARM processor via assembly, ARM pipelining used in most modern ARM processors and how it came about, and (3) the really cool way ARM can avoid branching, even with conditional control flow. These will be explained in both code, English, and (hopefully successful) live demos using an ARM development board. The end result is to get the audience to understand how to create a simple socket program written in ARM assembly.

Presenters:

• Brendan Watters
  Brendan Watters is a Senior Instructor and Course Author at TeleCommunication Systems’ Art of Exploitation Training Center in Hanover, MD. He has written courses covering ARM Assembly, x86 Assembly, Windows Programming, and Windows Kernel Rootkit Development. He received his M.A. in The History of Science in 2005 and his M.S. in Computer Science in 2009. Prior to coming to TCS, Brendan worked for the Department of Defense as a Computer Network Operator and Developer.

Links:

• https://infocon.org/cons/DerbyCon/DerbyCon 3 2013/video/A Syscall To Arms Brendan Watters.mp4

Similar Presentations:

• Black Hat USA 2011 / ARM exploitation ROPmap
• DEF CON 18 (2010) / Exploitation on ARM - Technique and Bypassing Defense Mechanisms
• DeepSec 2017 „Science First!“ / The ARM IoT Exploit Laboratory (Three-Day Workshop) (closed)