1. jd smithers's Avatar

    Thought it might be interesting for someone - slides and whitepaper on QNX/BB10 security architecture.

    QNX: Security Architecture Whitepaper
    This whitepaper provides an overview of QNX architectural security and the research performed in this area. The whitepaper describes the key operating system features of QNX and describes methods an attacker would go through when assessing QNX based platforms. The paper describes a number of weaknesses identified throughout this research and highlights where additional research could be performed to gain a further understanding of the security of the platform.

    QNX: 99 Problems but a Microkernel ain't one!
    Although Cars, Turbines, Safety Critical Systems and consumer devices (phones) all run QNX, very little security research has been performed in this area. This talk provided an overview of QNX security architecture with Blackberry 10 used as the primary target. An overview of the research performed on a locked down highly secured OS, the OS attack surface and our method for identifying weaknesses within the QNX OS were covered. The talk described our methods of identifying vulnerabilities from both a reverse engineering perspective and automated fuzzing approach. The talk aimed to provide a good overview of how the subsystems on QNX communication and how an attacker would attempt to elevate their privileges. The talk also highlighted some of the weaknesses identified with this on-going research and the challenges faced with exploit development on the platform.

    03-17-16 10:05 AM

Similar Threads

  1. Blackberry security z30
    By naorrazla in forum Ask a Question
    Replies: 6
    Last Post: 07-08-16, 10:15 AM
  2. nice Bb10 features now in Android N
    By freedomx20a in forum BlackBerry Priv
    Replies: 31
    Last Post: 04-02-16, 07:17 PM
  3. Experimentation with BB10
    By ealready_value in forum BlackBerry 10 OS
    Replies: 1
    Last Post: 03-17-16, 06:16 AM
  4. call waiting auto hold like bb10
    By heveys4 in forum BlackBerry Priv
    Replies: 0
    Last Post: 03-16-16, 08:28 PM
  5. is it possible to set up more than one phone user on BB10?
    By CrackBerry Question in forum Ask a Question
    Replies: 1
    Last Post: 03-16-16, 06:33 PM