Sicher habt auch ihr den ein oder anderen #Patienten, der nach einem Glรคschen ein rotes Gesicht bekommt. Was es mit diesen #Flushes auf sich hat und ob Gefahr fรผrs #Herz besteht, untersucht jetzt eine Studie.
http://docc.hk/nmvmuw
Thanks to Dr. Fauci, Twitter's new name is the #CesspoolOfInteractions. I now consider Tweets to be #Flushes.
#cesspoolofinteractions #flushes
[Paper of the day][#12] We all know that #malware can be #packed. But do you know how a #packer run in your system? I mean, do you know what happens in the CPU when a packed malware runs? In this paper, we explain the architectural events associated to #Self-Modifying Code (#SMC) execution. We show how cache is invalidated, the role of cache coherence protocol, the invalidation of the #trace #cache at the #CPU #decoder level, and the #pipeline stalls caused by instruction rewriting. We show how cache instrumentation and #Hardware #Performance Counters (#HPC) can be used to detect these events, working as detection trigger. We also show how to write SMC code using #cache #flushes to bypass eventual protection. Lots of good material on CPU internals.
Academic paper: https://link.springer.com/article/10.1007/s11416-020-00348-w
Archived version: https://secret.inf.ufpr.br/papers/SMC_marcus.pdf
SMC samples and CTF challenge: https://github.com/marcusbotacin/Self-Modifying-Code
#malware #packed #packer #self #smc #trace #cache #cpu #decoder #pipeline #hardware #performance #hpc #flushes