Seminar on Software Security, Vulnerabilities, and Compiler Optimizations

Alex is a tech & IP commercialization & monetization expert.

Alex G. Lee

I am pleased to invite you to the first Zeus San Francisco Bay Area Seminar on September 20, 2019.
In the seminar, secure coding expert Robert C. Seacord with NCC Group will lecture on the increasing risk of software vulnerabilities resulting from compiler optimizations. Increasingly, compiler writers are taking advantage of undefined behaviors in the C and C++ programming languages to improve optimizations. Frequently, these optimizations are interfering with the ability of developers to perform cause-effect analysis on their source code, that is, analyzing the dependence of downstream results on prior results. Consequently, these optimizations are eliminating causality in software and are increasing the probability of software faults, defects, and vulnerabilities. This seminar reviews some common optimizations, describes how these can lead to software vulnerabilities, and explains how to avoid these optimizations by writing correct code free undefined behaviors. Additionally, Robert will lecture on secure coding in C and C++. He will describe stack smashing attacks that can be used by attackers to overwrite the return address on the stack and transfer control to arbitrary code. The lecture will examine the behaviors of the program stack that allow these attacks to succeed, and specific exploit techniques including code injection, arc injection, and return-oriented programming.
Following Robert's lecture, Alex G. Lee with Zeus SW Defender, LLC will present a demo of Zeus technology that performs the dynamic re-encryption of code pointers to protect C and C++ software programs from buffer overflow attacks for interception and disclosure of control-flow. Zeus can successfully mitigate real world cyber-attacks reported in real world attacks described in CVEs.
Date/Time: September 20 (Friday), 2019 13:30 – 16:30
Venue: Seaport Conference Center, 459 Seaport Ct, Redwood City, CA 94063
Map: <A HREF="http://www.seaportconferencecenter.com/contact/" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">http://www.seaportconferencecenter.com/contact/</A>
Agenda:
1:00 - 1:30 pm: check-in and registration
1:30 - 2:20 pm: Secure coding in C and C++
2:20 - 3:10 pm: Zeus demo
3:10 - 3:30 pm: Coffee Break
3:30 - 4:20 pm: Compiler optimizations
4:20 - 5:00 pm: Q&A and networking
Zeus Details: Patent pending Zeus technology performs the dynamic re-encryption of code pointers to protect software programs written in the C and C++ programming languages from buffer overflow attacks for interception and disclosure of control-flow. Zeus can successfully mitigate real world cyber attacks reported in real world attacks described in CVEs.
As examples, Zeus can block control-flow hijacking caused by a stack buffer overflow vulnerability CVE-2018-18409 in the open source TCPFLOW project t(<A HREF="https://github.com/simsong/tcpflow/wiki" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://github.com/simsong/tcpflow/wiki</A>); CVE-2018-17439 and CVE-2018-15671 of the HDF5 library (<A HREF="https://www.hdfgroup.org/downloads" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://www.hdfgroup.org/downloads</A>); and CVE-2013-2028 of Nginx web server leaking a return address byte-by-byte (<A HREF="https://www.rapid7.com/db/vulnerabilities/nginx-cve-2013-2028" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://www.rapid7.com/db/vulnerabilities/nginx-cve-2013-2028</A>). Zeus injects instructions into programs at compile time programs to harden them against buffer overflows by encrypting and decrypting pointers at runtime. Zeus has low execution time overhead and does not require any additional security features outside of the program. Because Zeus can cover zero-day attacks, Zeus dramatically reduces the risks caused by buffer overflow. Zeus can be implemented in C and C++ Compliers.
Company Details:
NCC Group (<A HREF="https://www.nccgroup.trust/us/" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://www.nccgroup.trust/us/</A>) is an information assurance firm headquartered in Manchester, United Kingdom. Its service areas cover software escrow and verification, cyber security consulting and managed services, website performance, software testing and domain services. NCC Group claims over 15,000 clients worldwide.
Zeus SW Defender, LLC (<A HREF="http://www.zeusswdef.com/" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">http://www.zeusswdef.com/</A>) is based in Boston, and is operated for Zeus software defender technology development, commercialization, and monetization.
Speaker Details:
Robert Seacord Linkedin Profile: <A HREF="https://www.linkedin.com/in/robertseacord/" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://www.linkedin.com/in/robertseacord/</A>
<IMG ALT="rebert" SRC="https://cdn.evbuc.com/eventlogos/1665956/robert-1.jpg">
Alex G. Lee Linkedin Profile: <A HREF="https://www.linkedin.com/in/alexgeunholee/" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://www.linkedin.com/in/alexgeunholee/</A>
<IMG ALT="alex" SRC="https://cdn.evbuc.com/eventlogos/1665956/alex.png">

Seaport Conference Center

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

Seminar on Software Security, Vulnerabilities, and Compiler Optimizations

More events from Alex G. Lee

Discover more events from Alex G. Lee, from Science & Tech to other experiences you might love.

Still looking for the right event?

Explore all events in Redwood City and filter by date, category, and more to find the perfect fit.

Seminar on Software Security, Vulnerabilities, and Compiler Optimizations

More events from Alex G. Lee

Discover more events from Alex G. Lee, from Science & Tech to other experiences you might love.

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.

Still looking for the right event?

Explore all events in Redwood City and filter by date, category, and more to find the perfect fit.