Control-Flow Integrity Courses and Certifications

Security BSides San Francisco

Two-Faces of WASM Security

Explore the security aspects of WebAssembly (WASM) in this less than 1-hour material by Security BSides San Francisco. Learn about WASM's security model, its use in malicious activities, and how to protect against it.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

TheIACR

Current Status of RISC-V Security Mechanisms - Nick Kossifidis, FORTH

Explore RISC-V security mechanisms in a concise talk by Nick Kossifidis from TheIACR, covering privilege modes, page table, EPMP, and more. Duration:

• YouTube
• 24 minutes
• On-Demand
• Free Online Course

Association for Computing Machinery (ACM)

Enforcing Unique Code Target Property for Control-Flow Integrity

Explore control-flow integrity and learn to prevent control-hijacking attacks with this ACM offering. In under an hour, understand unique code target property and efficient analysis path reconstruction.

• YouTube
• 24 minutes
• On-Demand
• Free Online Course

Black Hat

Taking Kernel Hardening to the Next Level

Learn advanced kernel hardening techniques like CFI and UAF defense from Black Hat experts in under an hour. Explore why current methods fall short and discover new strategies.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Black Hat

The Power of Data-Oriented Attacks - Bypassing Memory Mitigation Using Data-Only Exploitation Techniques

Learn to bypass memory mitigation using data-only exploitation techniques with Black Hat's 1-2 hour material. Understand Control Flow Integrity and its limitations.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

USENIX

ROP is Still Dangerous - Breaking Modern Defenses

Explore ROP exploitation techniques and learn to break modern defenses with this under 1-hour material from USENIX and University of California, Berkeley.

• YouTube
• 17 minutes
• On-Demand
• Conference Talk

USENIX

Control-Flow Bending - On the Effectiveness of Control-Flow Integrity

Explore the effectiveness of Control-Flow Integrity (CFI) in preventing hijacking attacks in this short program by USENIX. Learn about its limitations, evaluation metrics, and the role of shadow stacks.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

IEEE

Mitigating Spectre Attacks Using CFI Informed Speculation

Learn to mitigate Spectre attacks using CFI informed speculation in this concise, less than 1-hour material from IEEE. Gain insights into micro-architectural attacks, ISA extension, and performance evaluation.

• YouTube
• 17 minutes
• On-Demand
• Free Online Course

IEEE

A Tough Call - Mitigating Advanced Code-Reuse Attacks at the Binary Level

Learn to mitigate advanced code-reuse attacks at the binary level with IEEE's material. Understand control-flow integrity techniques and reduce indirect branch targets. Less than 1hr workload.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

IEEE

Micro-Policies - Formally Verified, Tag-Based Security Monitors

Learn to define and verify micro-policies for security with IEEE's short program. Gain insights into dynamic sealing, compartmentalization, control-flow integrity, and memory safety.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Black Hat

The Beast is in Your Memory

Learn about Return-oriented Programming (ROP) exploitation techniques and how to thwart ROP attacks with Black Hat's concise program. Understand emerging control-flow integrity mechanisms and their weaknesses.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Black Hat

Return to Where? You Can't Exploit What You Can't Find

Explore advanced techniques to detect and prevent exploitation of memory corruption vulnerabilities with Black Hat. Learn about control-flow integrity defenses, execute-only memory, and build a practical defense called Readactor.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Black Hat

The Dark Age of Memory Corruption Mitigations in the Spectre Era

Explore memory corruption defenses and their vulnerabilities to speculative execution attacks in this under 1-hour material by Black Hat.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Black Hat

Capturing 0Day Exploits With Perfectly Placed Hardware Traps

Black Hat's short program on hardware-assisted Control-Flow Integrity (CFI) to mitigate control-flow hijack attacks. Learn to block exploits before execution, with real-time demonstrations.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Black Hat

Drop the ROP - Fine-Grained Control-Flow Integrity for the Linux Kernel

Learn about Control-Flow Integrity (CFI) for Linux Kernel security from Black Hat in under an hour. Explore memory safety bugs, mitigation, and fine-grained control-flow issues.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk