Web Articles - 随笔分类 - CoryXie

posted @ 2014-10-07 23:09 CoryXie

Memory Ordering in Modern Microprocessors

摘要：Linux has supported a large number of SMP systems based on a variety of CPUs since the 2.0 kernel. Linux has done an excellent job of abstracting away differences among these CPUs, even in kernel c... 阅读全文

posted @ 2014-09-22 23:46 CoryXie

FORTIFY_SOURCE

摘要：In recent years Linux distributions started treating security more seriously. Out of many security features two are directly affecting C programmers:-fstack-protectorand-D_FORTIFY_SOURCE=2. These G... 阅读全文

posted @ 2014-09-18 13:50 CoryXie

Atomic operations on the x86 processors

摘要：On the Intel type of x86 processors including AMD, increasingly there are more CPU cores or processors running in parallel. In the old days when there was a single processor, the operation: ++i; Woul... 阅读全文

posted @ 2014-09-18 00:04 CoryXie

File System Design Case Studies

摘要：SRC=http://www.cs.rutgers.edu/~pxk/416/notes/13-fs-studies.html Paul Krzyzanowski April 24, 2014 Introduction We've studied various approaches to file system design. Now we'll look at some real file... 阅读全文

posted @ 2014-09-17 00:25 CoryXie

What is x86 Conforming Code Segment?

摘要：SRC=Microprocessor Based Systems SRC=Computer Architecture: A Quantitative Approach 阅读全文

posted @ 2014-09-11 23:03 CoryXie

Introducing ASLR for FreeBSD

摘要：Shawn WebbOliver Pinter10 July 2014http://www.hardenedbsd.org/ [ 1. Introduction ]Security in FreeBSD is based primarily in policy-based technologies. Existing tools such as jails, Capsicum, vnet/vi... 阅读全文

posted @ 2014-09-10 23:50 CoryXie

BUFFER OVERFLOW 10 Vulnerability & Exploit Example

摘要：SRC=http://www.tenouk.com/Bufferoverflowc/Bufferoverflow6.html THE VULNERABLE AND THE EXPLOIT Warning: All the security setting for buffer overflow protection (non-executable stackandra... 阅读全文

posted @ 2014-09-10 22:58 CoryXie

Writing buffer overflow exploits - a tutorial for beginners

摘要：Buffer overflows in user input dependent buffers have become one of the biggest security hazards on the internet and to modern computing in general. This is because such an error can easily be made at... 阅读全文

posted @ 2014-09-09 18:28 CoryXie

radare, the reverse engineering framework

摘要：History The radare project [http://radare.org/] started in February of 2006 aiming to provide a free and simple command line interface for a hexadecimal editor supporting 64 bit offsets to make search... 阅读全文

posted @ 2014-09-07 23:40 CoryXie

YASM User Manual

摘要：This document is the user manual for the Yasm assembler. It is intended as both an introduction and a general-purpose reference for all Yasm users. 1.Introduction Yasm is a BSD-licensed assembler tha... 阅读全文

posted @ 2014-09-06 22:21 CoryXie

NASM Syntax

摘要：NASM has a simplified syntax designed to let the user code with minimum overhead. In its simplest form, a NASM program needs nothing more than the assembly-language instructions; no assembler directiv... 阅读全文

posted @ 2014-09-06 22:18 CoryXie

GAS Syntax

摘要：GAS orGNU assyntax is a different form of syntax for assembly language files, known also as AT&T syntax after the original style. It is commonly used by other versions of GAS for other architectures... 阅读全文

posted @ 2014-09-06 22:04 CoryXie

Mac OS X Kernel Basic User Credentials

摘要：User Credentials In order to understand security in OS X, it is important to understand that there are two security models at work. One of these is the kernel security model, which is based on users,... 阅读全文

posted @ 2014-09-06 10:44 CoryXie

A GUIDE TO UNDERSTANDINGDISCRETIONARY ACCESS CONTROL INTRUSTED SYSTEMS

摘要：1. INTRODUCTION The main goal of the National Computer Security Center is to encourage the widespread availability of trusted computer systems. In support of that goal a metric was created, the Depa... 阅读全文

posted @ 2014-08-24 22:49 CoryXie

FreeBSD 5.0中强制访问控制机制的使用与源代码分析【转】

摘要：本文主要讲述FreeBSD 5.0操作系统中新增的重要安全机制，即强制访问控制机制（MAC）的使用与源代码分析，主要包括强制访问控制框架及多级安全（MLS）策略两部分内容。这一部分讲述要将MAC框架与MLS策略用起来，应该做的一些工作，以及如何有效使用它们的问题。强制访问控制（英文缩写MAC）是实现操作系统安全的一个重要的方法，现在几乎所有的安全操作系统都采用强制访问控制作为其核心安全... 阅读全文

posted @ 2014-08-16 00:57 CoryXie

FreeBSD中的SYSINIT框架【转】

摘要：SYSINIT是一个通用的调用排序与分别执行机制的框架。FreeBSD目前使用它来进行内核的动态初始化。SYSINIT使得FreeBSD的内核各子系统可以在内核或模块动态加载链接时被重整、添加、删除、替换，这样，内核和模块加载时就不必去修改一个静态的有序初始化安排表甚至重新编译内核。这个体系也使得内核模块(现在称为KLD可以与内核不同时编译、链接、在引导系统时加载，甚至在系统运行时加载。这些操作是... 阅读全文

posted @ 2014-08-15 23:34 CoryXie

FreeBSD 内核中的SYSINIT分析【转】

摘要：FreeBSDkernel是一个膨大的系统,对于这样一个大系统,里面往往包含了大量的子系统和模块,当系统初始化时这些模块就需要初始化,按照通常的思路,这些初始化过程必须在某处被显式地调用,这样一来,当你新增某个模块,你必须再修改那个系统初始化的地方来调用这个新增模块的初始化过程,而且由于ANSIC语言的限制,调用某个函数最好先声明,这样当系统的初始化过程开始增加时,那... 阅读全文

posted @ 2014-08-15 23:22 CoryXie

无线物联网中CoAP协议的研究与实现【转】

摘要：无线物联网中CoAP协议的研究与实现时间：2013-04-09来源：电子科技作者：汤春明，张荧，吴宇平关键字：CoAP无线物联网协议摘要：由于物联网中的很多设备都是资源受限型的，即只有少量的内存空间和有限的计算能力，所以传统的HTTP协议应用在物联网上就显得过于庞大而不适用。IETF的Co... 阅读全文

posted @ 2014-07-10 00:32 CoryXie

The use of FS/GS registers

摘要：博注：偶很少弄Windows的东西，偶尔因为RE了ntoskrnl.exe->ntoskrnl.c，发现里面很多__readfsdword(32),__readfsdword(292)之类的调用，因此Google了一下，下面是记录,不敢说原创，故都列出了原文地址。1.What is the “FS”... 阅读全文

posted @ 2013-01-29 06:27 CoryXie

CoryXie

公告

随笔分类 - Web Articles