~/talk

Building Hardened IoT Implementations With LangSec

on YouTube 42m
Talkat nullcon Goa 2019 · 2019-03-01..03-02· [security, embedded-and-hardware]

speaker

name:Prashant Anantharaman
links:none on file

resources

video:https://youtu.be/jFde6jT-5mk
slides:none on file

summary

Language-theoretic approach separates recognition from processing and yields concrete results: a C/C++ hammer parser-combinator library (bindings for Ruby, Python, .NET) plus a generator/fuzzer pipeline (H_agee) that emits valid seeds from grammars. Implementations for MQTT, XMPP, AMQP (AMQP in Python 2.7) and SCADA protocols (DNP3, IEC C37) parse like the spec, run on a Raspberry Pi in microseconds, keep parser code under ~50 LOC, and survive state-of-the-art fuzzers (AFL/libFuzzer) with no crashes over 24 hours.

AI-written summary · about

chapters (8)

  1. 0:00Start
  2. 7:12Parsing & protocol anti-patterns
  3. 14:14A recap of the Chomsky hierarchy
  4. 16:53Principles & Desiderata
  5. 23:20AMQP Protocol
  6. 28:37Code that looks like grammar - DNP3
  7. 33:32Wiring hammer with
  8. 34:55Concluding Remarks

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.