Cyber@UC Meeting 88 GHIDRA If Youre New! Join our Slack: - - PowerPoint PPT Presentation

Cyber@UC Meeting 88

GHIDRA

If You’re New!

• Join our Slack: cyberatuc.slack.com
• Check out our website: cyberatuc.org
• Organization Resources on our Wiki: wiki.cyberatuc.org
• SIGN IN! (Slackbot will post the link in #general every Wed@6:30)
• Feel free to get involved with one of our committees:

Content Finance Public Affairs Outreach Recruitment Lab

• Ongoing work in our research lab!

Announcements

• Bi-weekly lab events!

○ Socket Programming!

• Executive meeting Sunday, all are

welcome

• Dodgeball Thursday
• Shirts!
• Loveland High School Outreach

Success

Weekly News

Prototype iPhone Security

• Developer iPhones are

“pre-jailbroken” by factory

• Secure Enclave Processor (SEP)

unprotected on prototypes

• Recently gaining popularity with

vulnerability researchers looking to break iPhone security

https://nakedsecurity.sophos.com/2019/03/08/for-sale-gray-ma rket-iphones-that-yield-secrets-to-encryption/

US College Data Ransom

• Oberlin College (OH), Grinnell

College (IA), Hamilton College (NY) impacted

• Ransom price at one bitcoin

○ (cur. ~$3800)

• Data being ransomed is the

“entire admission file” for all applicants

http://fortune.com/2019/03/08/college-applicant-ransomware-h ack/

IoT Security Bill Proposed

• The IoT Cybersecurity

Improvement Act, originally introduced in Aug. 2017

• Aims to add NIST

recommendations as basic standards of IoT products

• Only covers devices marketed to

the U.S. Government

https://www.beckershospitalreview.com/cybersecurity/congres s-re-introduces-bill-to-enhance-iot-cybersecurity-4-notes.html

Protect Our Universities Act

• Aims to ban Kaspersky, Huawei,

and ZTE products from college research projects of National Security Interest

• All companies proposed to ban

are suspected of being used by foreign governments for various purposes

• All companies already banned

from U.S. gov use at some level

https://www.washingtonpost.com/news/powerpost/paloma/the- cybersecurity-202/2019/03/13/the-cybersecurity-202-republica ns-want-kaspersky-huawei-banned-from-sensitive-university-r esearch-projects/5c884bd91b326b0f7f38f152/?noredirect=on &utm_term=.57effc0b7ad3

GHIDRA

• NSA Developed Software Reverse Engineering (SRE) tool
• Basically blows out of the water IDA/r2/BinaryNinja
• Free and Open Source

gitlab.com/cyberatuc/ghidra