Rowhammer Vulnerability Comes to Android

Name: BSidesBHAM
Start: 2019-10-12T00:00:00-04:00
End: 2019-10-12T23:59:59-04:00
Location: Birmingham

Posted: 11/01/2016 | Leave a Comment

Researchers have published details of a new method for exploiting a problem with Android devices tied to a hardware flaw within DRAM memory modules that can allow attackers to get root-level access to target machines.

https://threatpost.com/rowhammer-vulnerability-comes-to-android/121480/

Request for Information - Cyber Community of Interest (CoI) Study on Technology Future and Science & Technology (S&T) Investment

The Cyber CoI is conducting a study to identify important new technologies and applications that are likely to have major impact on the Cyber S&T (applied research and advanced technology development) investments in near (now till 2025), mid (2025-2030) and far (beyond 2030) term future.

Learn More

CSIAC Report - Evolving Developments in Cyberlaw:
June 2019

CSIAC SME and member of the American Bar Association’s Information Security Committee, Richard “Rick” Aldrich, gives an updated snapshot of evolving developments in cyberlaw, policy, standards, court cases and industry legal frameworks. These slides provide updates to an earlier report on cyberlaw from March of 2019.

View the Slides

CSIAC Journal - Launching Innovation Through Medical Modeling and Simulation Technologies

This edition of the CSIAC Journal highlights three very different views of complex situations where AI might, should, and does intersect with our ability to use AI effectively.

Read the Journal

The DoD Cybersecurity Policy Chart

This chart captures the tremendous breadth of applicable policies, some of which many cybersecurity professionals may not even be aware, in a helpful organizational scheme.

View the Policy Chart

CSIAC Report - JFAC/DAU/CSIAC Cyber Experiment (CYBEX)

This report details key concerns discussed during the JFAC/DAU/CSIAC Software Assurance (SwA) Cyber Experiment (CYBEX). In addition to evaluating newly developed SwA guides for program managers and developers, the exchange included addressing/bringing back foundational software/system engineering concepts to address root of fundamental SwA issues as well as adopting common language in the areas of functionality and risk in order to identify issues early.

Read the Report