~/talk

Adaptive Kernel Live Patching: An Open Collaborative Effort...

on YouTube 47m
Talkat Black Hat USA 2016 · 2016-08-03..08-04· [android, security]

speakers

name:Yulong Zhang
links:none on file
name:Tao Wei
links:none on file

resources

video:https://youtu.be/gPtL-AIjicw
slides:none on file

summary

Framework claims live binary hotpatching for fragmented Android kernels without source by generating adapted patches from device-collected kernel info and injecting via kernel-module and /dev/km injection. It ships a constrained Lua engine (LuKpatch) for quick input-validation hooks and a binary-template flow (adaptive Kpatch) for full fixes. Tests cover Towelroot, pingpong and "1805" exploits across Samsung, Huawei, HTC and others; demo fixes five kernel exploits on a real device, reports ~99.4% device coverage (95% inode, 60% km), ~800 KB module and <4% syscall overhead.

AI-written summary · about

chapters (6)

  1. 0:00Start
  2. 12:08Kernel Live Patching
  3. 18:29Patching Payload Execution
  4. 25:25Multi-stage Vetting Mechanism
  5. 33:47Efficacy Evaluation
  6. 36:40Performance Evaluation

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.