Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Multimedia Security Topics

Shumpei Urabe
June 23, 2021
Technology
0
2k

Multimedia Security Topics

OWASP Sendai #48
https://owaspsendai.connpass.com/event/213819/

Shumpei Urabe

June 23, 2021
Tweet

More Decks by Shumpei Urabe

See All by Shumpei Urabe
AIを活用した放送技術スタートアップの制作現場改革について
yaminoma
0
14k
動画配信技術について
yaminoma
1
1.2k
コロナ禍でのライブストリーミングの変化とテレビ放送の規格について
yaminoma
0
940
今日から分かる Android Audioの全て
yaminoma
0
370
Apple Low-Latency HLSを使った 超低遅延配信について
yaminoma
3
4.5k
今日から分かる AVAudioEngineの全て
yaminoma
4
5.7k
Cross Platform Video Player
yaminoma
0
420
PHPとRustを組み合わせて音声ファイルをエンコードする話
yaminoma
0
3.2k
字幕のはなし
yaminoma
4
1.7k

Other Decks in Technology

See All in Technology
権威ドキュメントで振り返る2024 #年忘れセキュリティ2024
hirotomotaguchi
2
750
多領域インシデントマネジメントへの挑戦：ハードウェアとソフトウェアの融合が生む課題/Challenge to multidisciplinary incident management: Issues created by the fusion of hardware and software
bitkey
PRO
2
110
生成AIをより賢く エンジニアのための RAG入門 - Oracle AI Jam Session #20
kutsushitaneko
4
240
ガバメントクラウドのセキュリティ対策事例について
fujisawaryohei
0
550
alecthomas/kong はいいぞ / kamakura.go#7
fujiwara3
1
300
社外コミュニティで学び社内に活かす共に学ぶプロジェクトの実践/backlogworld2024
nishiuma
0
260
組織に自動テストを書く文化を根付かせる戦略（2024冬版） / Building Automated Test Culture 2024 Winter Edition
twada
PRO
17
4.4k
10分で学ぶKubernetesコンテナセキュリティ/10min-k8s-container-sec
mochizuki875
3
350
NilAway による静的解析で「10 億ドル」を節約する #kyotogo / Kyoto Go 56th
ytaka23
3
380
PHPerのための計算量入門/Complexity101 for PHPer
hanhan1978
5
140
コンテナセキュリティのためのLandlock入門
nullpo_head
2
320
Snykで始めるセキュリティ担当者とSREと開発者が楽になる脆弱性対応 / Getting started with Snyk Vulnerability Response
yamaguchitk333
2
190

Featured

See All Featured
GraphQLの誤解/rethinking-graphql
sonatard
67
10k
10 Git Anti Patterns You Should be Aware of
lemiorhan
PRO
656
59k
The Cult of Friendly URLs
andyhume
78
6.1k
Building Applications with DynamoDB
mza
91
6.1k
Principles of Awesome APIs and How to Build Them.
keavy
126
17k
Why You Should Never Use an ORM
jnunemaker
PRO
54
9.1k
The Web Performance Landscape in 2024 [PerfNow 2024]
tammyeverts
2
290
Helping Users Find Their Own Way: Creating Modern Search Experiences
danielanewman
29
2.3k
A Modern Web Designer's Workflow
chriscoyier
693
190k
Documentation Writing (for coders)
carmenintech
66
4.5k
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
jcasabona
29
2k
The Language of Interfaces
destraynor
154
24k

Transcript

  1. Multimedia Security Topics Speaker: Shumpei Urabe(NAXA, Inc.) OWASP Sendai #48

  2. Speaker Bio 4IVNQFJ6SBCF $&01SFTJEFOUPG/"9" *OD 'PVOEFSPG'VLVPLB7JEFP5FDI .VMUJNFEJB3FTFBSDIFS

  3. Today's 
 Outline "CPVU%3. $BUFHPSZPG%3. "CPVU5&& %FDSZQUPG%3. )BSEXBSF4FDVSJUZ *NQMFNFOU4FDVSJUZ4BOECPY VTJOH6OJLFSOFM

    $PODMVTJPO

  4. About DRM

  5. Live streaming that continues to be popular w 8JUIUIF$07*% XIBUJTDVSSFOUMZHBJOJOH

    NPNFOUVNJTPOMJOFTUSFBNJOH w /PXUIBUUIFHPWFSONFOUBOEQSFGFDUVSFTBSF GPSDJOHVTUPHPXJUIPVUBOBVEJFODF UIFPOMZXBZ UPEFMJWFSFOUFSUBJONFOUJTUISPVHIMJWFTUSFBNJOH w 4P CFIJOEUIFTDFOFTBTXFTQFBL UIFSFJTBMPUPG EJTUSJCVUJPOHPJOHPO w 5IFSFJTBDVSSFOUQSPCMFNXJUIUIJTUZQFPGPOMJOF TUSFBNJOH

  6. Video Thief

  7. No captures allowed w *UJTFBTZUPUBLFBTDSFFOTIPUPGUIFEFMJWFSZQBHF PS SFDPSECZEFTLUPQDBQUVSF BOEFWFOUVBMMZSFDPSEUIF NPOJUPSXJUIBTNBSUQIPOFDBNFSB"OEJUJTJNQPTTJCMF UPTUPQUIFNDPNQMFUFMZ

    w *GZPVXBOUUPTUPQUIFNDPNQMFUFMZ ZPVXJMMIBWFUP USBDLUIFJSNPVTFBOELFZCPBSE MJLFJO$#5FYBNT BOE ZPVXJMMBMTPIBWFUPXFBSBXFCDBNUPNPOJUPSUIFN  CVUZPVEPOUXBOUUPHPUISPVHIUIBUNVDIUSPVCMF XIFOZPVBSFFOKPZJOHXBUDIJOHUIFN SJHIU  w "TZPVDBOTFF JUJTOPUQPTTJCMFUPQSFWFOUJU DPNQMFUFMZ CVUJUJTQPTTJCMFUPNBLFJUJNQPTTJCMF XJUIPVUVTJOHBWFSZEJG fi DVMUNFUIPE

  8. It is DRM.

  9. Digital Rights Management w %3.JTBOBDSPOZNGPS%JHJUBM3JHIUT.BOBHFNFOU w %3.JTBNFDIBOJTNUIBUVTFTTPGUXBSFDPOUSPMUPQSPUFDUDPOUFOU BOE%3.JUTFMGJTOPUBUFDIOPMPHZ w 5IFSFJTBMTPBDPQZHVBSE

    ""$4 GPS%7%TBOE#MVSBZTUIBUJTTJNJMBS CVUJOBCSPBEFSTFOTF JUDBO CFTBJEUPCFBGPSNPG%3. w 5IFIJTUPSZPG%3.JTRVJUFPME XJUIDPODFQUVBMQSPQPTBMTBTFBSMZBTUIFT w 0ODFVQPOBUJNF XIFO fl BTINFNPSZBOEIBSEEJTLTXFSFOPUBWBJMBCMF NBHOFUJDUBQFTXFSFVTFEGPS SFDPSEJOH w )PXFWFS NBHOFUJDUBQFTDPVMECFFBTJMZEVQMJDBUFE BOEUIJTMFEUPSBNQBOUEVQMJDBUJPO NBLJOHJU EJG fi DVMUGPSEFWFMPQFSTUPSFDPWFSUIFJSEFWFMPQNFOUDPTUTFWFOBGUFSNBLJOHIVHFJOWFTUNFOUT w 5IFDPODFQUPG%3.XBTCPSOUPQSFWFOUUIJTGSPNIBQQFOJOH*OUIFT UIFJEFBPGFODSZQUJOHBOE QSPUFDUJOHDPOUFOUUISPVHITPGUXBSFDPOUSPMXBTQSPQPTFE w 5IJTJTXIFSFUIFIJTUPSZPG%3.CFHBO

  10. Category of DRM

  11. There are many types of DRM w 5PEBZ UIFTUSFBNJOHNFUIPEJTUIFNBJOTUSFBNNFUIPE GPSEJTUSJCVUJOHWJEFPBOEBVEJP

    BOEXJUIUIFTQSFBEPG $%/T UIFTUSFBNJOHNFUIPEJTCFJOHVTFEJOTUFBEPG EPXOMPBEJOHBTJOHMF fi MFBTJUJT TFOEJOHJUJOTNBMM QJFDFTUPGBDJMJUBUFNPSF fl FYJCMFDBDIFDPOUSPM w 0OFPGUIFBEWBOUBHFTPGUIFTUSFBNJOHNFUIPEJTUIBU UIFDMJFOUPOMZOFFETUPBDRVJSFUIFOFDFTTBSZEBUB TP UIFSFJTOPOFFEUPBDRVJSFFWFSZUIJOH5IJTNBLFTUIF BDRVJTJUJPOBOEQMBZCBDLQSPDFTTGBTUFS BOEBMTP FMJNJOBUFTUIF fl PXPGVOOFDFTTBSZUSBG fi D XIJDIIBT NBOZBEWBOUBHFTGPSCPUIUIFEFMJWFSZTJEFBOEUIF WJFXJOHTJEF

  12. HLS and MPEG-DASH w *OUIFXPSMEPGNVMUJNFEJB UIFSFBSFUXPTUSFBNJOH NFUIPET)551-JWF4USFBNJOH DPNNPOMZLOPXOBT)-4  XIJDIJTCBTFEPO)551BOEEFWFMPQFECZ"QQMF

    BOE .1&(%"4) BMTPCBTFEPO)551BOEEFWFMPQFECZ .1&( w *OHFOFSBM CPUIBSFVTFE CVU)-4JTNPSFDPNNPOMZ VTFEUIFTFEBZTNVJTBNBOJGFTU fi MFUIBUDPOUBJOT EFUBJMFEWJEFPEBUB BOEUIFQMBZFSGFUDIFTJUUPQMBZUIF WJEFP w 5IFSFBSFTFWFSBMUZQFTPGFODSZQUJPONFUIPETGPSUIJT )-4BOE%"4)

  13. HLS-AES w )-4"&4FODSZQUT)-4TFHNFOUTXJUI"&4 w 5IFLFZJOGPSNBUJPOJTDPOUBJOFEJOUIFNBOJGFTU BOE XIFOQMBZJOHUIFWJEFP UIFQMBZFSSFUSJFWFTUIFLFZ GSPNUIFLFZJOGPSNBUJPOBOEEFDSZQUTUIFTFHNFOUGPS QMBZCBDL

    w 5IFBEWBOUBHFPGUIJTJTUIBUFWFOJGZPVEPXOMPBEUIF )-4TFHNFOUBTJUJT ZPVXJMMOPUCFBCMFUPQMBZJUPO QMBZFSTTVDIBT7-$ w 5IFEJTBEWBOUBHF IPXFWFS JTUIBUUIFLFZJTWFSZFBTZ UPPCUBJO*OGBDU UIFLFZJOGPSNBUJPOJTXSJUUFOJOUIF NBOJGFTU CVUJUJTFBTZUPPCUBJOUIFLFZGSPNIFSF BOE JUDBOCFFBTJMZPCUBJOFEBOEEFDSZQUFE

  14. FairPlay w 'BJS1MBZIBTCFFOBSPVOEGPSBMPOHUJNF BOEFWFOUIF TPOHT*QVSDIBTFEPOJ5VOFTVTFEUPIBWFUIFJSBVEJP fi MFTQSPUFDUFECZ'BJS1MBZ BOEUIF*1" J04BQQMJDBUJPO FYFDVUBCMF

    EJTUSJCVUFEJOUIF"QQ4UPSFXBTBMTP QSPUFDUFECZ'BJS1MBZ w 0OFPGUIFNBJOGFBUVSFTPG'BJS1MBZJTUIBUJUJT JOUFHSBUFEJOUPUIFPQFSBUJOHTZTUFN TPUIBUUIF%3. NFDIBOJTNDBOCFJOUFHSBUFEJOUPUIFPQFSBUJOHTZTUFN UPQSFWFOUDBQUVSJOHBOENPEJ fi DBUJPOGSPNPVUTJEF w 5IFBQQMJDBUJPOPG'BJS1MBZUP)-4JT'BJS1MBZ4USFBNJOH 'BJS1MBZ4USFBNJOHPOMZTVQQPSUT)-4PS$."'

  15. Widevine w 'PMMPXJOH"QQMFTMFBE (PPHMFEFWFMPQFEBQSPUFDUJPO TZTUFNDBMMFE8JEFWJOF XIJDITVQQPSUT)-4 .1&( %"4) BOE$."' w

    8JEFWJOFJTB%3.TZTUFNPSJHJOBMMZQSPWJEFECZB DPNQBOZDBMMFE8JEFWJOF5FDIOPMPHJFT XIJDIXBT BDRVJSFECZ(PPHMFJO*UJTOPXVOEFSUIF "MQIBCFUVNCSFMMB w *UJTOPFYBHHFSBUJPOUPTBZUIBU8JEFWJOFJTUIFNPTU VTFE%3.JOUIFXPSME w 5PEBZ XJUIUIFXJEFTQSFBEVTFPG(PPHMF$ISPNFBOE UIFQPQVMBSJUZPG"OESPJETNBSUQIPOFT 8JEFWJOFJT CFJOHVTFEPOBXJEFWBSJFUZPGEFWJDFT

  16. Security Level of Widevine w 0OFPGUIFVOJRVFGFBUVSFTPG8JEFWJOFJTBDPODFQUDBMMFETFDVSJUZMFWFM5IJTTFDVSJUZMFWFMJTBTTJHOFE CBTFEPOIPXXFMMUIFQMBZCBDLEFWJDFNFFUTUIFTFDVSJUZSFRVJSFNFOUT w 5IJTTFDVSJUZMFWFMJTEFUFSNJOFEBUUIFIBSEXBSFMFWFM BOEWJFXJOHJTSFTUSJDUFECZUIFTFDVSJUZMFWFM

    w 5IFSFBSFUISFFMFWFMTPGTFDVSJUZ XJUIMFWFMCFJOHUIFTUSPOHFTU5IFOFYUTUSPOHFTUJTMFWFM  GPMMPXFECZMFWFM BOEUIFMPXFTUJTMFWFM

  17. Security Level of Widevine w "UMFWFM BMMDPOUFOUQSPDFTTJOH FODSZQUJPOBOEDPOUSPMNVTUCFQFSGPSNFEJOUIF4P$TUSVTUFE FYFDVUJPOFOWJSPONFOU UIJTJTDBMMFE5&&

    UPQSFWFOUFYUFSOBMUBNQFSJOHPSDPQZJOHPGNFEJB fi MFT'PS FYBNQMF JOUIFDBTFPG"3.QSPDFTTPST UIFSFJTBGVODUJPODBMMFE5SVTU;POF XIJDIJTB5&& w *OMFWFM UIFDPOUFOUFODSZQUJPOJUTFMGJTEPOFCZ5&& CVUUIFQMBZCBDLQSPDFTTJTOPUQFSGPSNFECZ 5&& w -FWFMBQQMJFTXIFOUIFEFWJDFEPFTOPUIBWF5&& PSXIFOJUJTQSPDFTTFEPVUTJEFUIFEFWJDF)PXFWFS  FWFOBU-FWFM JUJTOFDFTTBSZUPUBLFBQQSPQSJBUFNFBTVSFTBHBJOTUFODSZQUJPO

  18. Security Level of Widevine w 5IJTJTUIFTFDVSJUZMFWFM*GZPVEPOPUNFFUMFWFM ZPVXJMMOPUCFBCMFUPQMBZ)%PSIJHIFSRVBMJUZ*O BEEJUJPO FWFOJGUIFEFWJDFNFFUTMFWFM ZPVDBOEFDJEFXIFUIFSUPQMBZJUPSOPUPOUIFBQQMJDBUJPO

    TP ZPVNBZOPUCFBCMFUPQMBZDFSUBJOEFWJDFTVTJOHUIFCMBDLMJTUNFUIPE5IFSFBTPOGPSUIJTCMBDLMJTUJOH NFUIPEJTUIBUFWFOJGUIFBVUIFOUJDBUJPOQBTTFT 8JEFWJOFEPFTOPUHVBSBOUFFUIBUUIFEFWJDFJT DPNQMFUFMZTBGF TPUIFSFBSFDBTFTXIFSFTPNFEFWJDFTPG$IJOFTFQSPEVDUTBSFSFKFDUFE w "MTP ZPVNBZUIJOLUIBUJUJTRVJUFEJG fi DVMUGPSEFWJDFNBOVGBDUVSFSTUPPCUBJO8JEFWJOF CVUBMUIPVHI UIFSFJTBDFSUBJOBNPVOUPGUFEJPVTQSPDFTT 8JEFWJOFJUTFMGDBOCFPCUBJOFEGPSGSFF TPNBOVGBDUVSFST XIPEPOPUPCUBJO8JEFWJOFBSFMJLFMZUPIBWFTPNFTPSUPGQSPCMFN w 5IJT8JEFWJOF CVUVOMJLF"QQMF'BJS1MBZ 8JEFWJOFJUTFMGJTOPUDPNQMFUFMZJOUFHSBUFEJOUPUIF04 BOEJO UIFDBTFPG8JEFWJOFMFWFM 4%RVBMJUZDPOUFOUDBOCFQMBZFE TPJUJTOPUDPNQMFUFMZQSPUFDUFE5IJTJTB CJHEJGGFSFODF

  19. PlayReady w 1MBZ3FBEZ EFWFMPQFECZ.JDSPTPGU TVQQPSUT)-4BOE .1&(%"4) $."' BTXFMMBT8JEFWJOF BOE.JDSPTPGUT PXOGPSNBU

    .JDSPTPGU4NPPUI4USFBNJOH w 1MBZ3FBEZXBTJOUSPEVDFEJOBOEXBTDSFBUFEUP QSPUFDU8.7 8JOEPXT.FEJB7JEFP BOE8." 8JOEPXT .FEJB"VEJP  w 1MBZ3FBEZ MJLF'BJS1MBZ JTJOUFHSBUFEJOUPUIF04BOEJT UIFSFGPSFTFDVSF*UDBOBMTPCFQSFWFOUFEXJUISFTQFDU UPDBQUVSJOH FUD

  20. OPL of PlayReady w 1MBZ3FBEZ MJLF8JEFWJOF IBTUXPTFDVSJUZMFWFMT UIF fi STUPOFJTDBMMFE01-

    0VUQVU1SPUFDUJPO-FWFMT  w 5IF fi STUJTDBMMFE01- 0VUQVU1SPUFDUJPO-FWFMT "DDPSEJOHUP.JDSPTPGUTEPDVNFOUBUJPO UIFSFBSF FJHIU01-MFWFMT       BOE XJUICFJOHUIFIJHIFTUBOE CFJOHUIFMPXFTU w 5IF01-JT fi OFMZDPOUSPMMFECZUIFPVUQVUEFTUJOBUJPOPGUIFEFWJDF'PSFYBNQMF XIFOQMBZJOHDPOUFOU POBEJTQMBZUIBUEPFTOPUTVQQPSU)%$1 JUXJMMCF01-PSMBUFS BOE)%QMBZCBDLXJMMOPUCF QPTTJCMF

  21. SL of PlayReady w 4FDPOEMZ UIFSFJTBTFDVSJUZMFWFMDBMMFE4-UIFSFBSFUISFFUZQFTPG4-4- 4- BOE4- w 5IFSFBSFUISFF4-T4-

    4- BOE4-4-JTUIFMPXFTUTFDVSJUZMFWFMJO1MBZ3FBEZ4- JTUIFMPXFTUTFDVSJUZMFWFMJO1MBZ3FBEZBOETIPVMEOPUCFVTFEGPSBOZUIJOHPUIFSUIBOEFCVHHJOH w 4-JTBTPGUXBSFPOMZWFSTJPOPG%3. w 5IF4-IBOEMFT%3.JOBTFDVSFFYFDVUJPOFOWJSPONFOUTVDIBT5FF w 3FDFOUMZ UIFSFBSFNPSFBOENPSFTFSWJDFTUIBUSFRVJSF4-UPCFBCMFUPQMBZCBDL)%PSIJHIFS RVBMJUZDPOUFOU

  22. About TEE

  23. Trusted Execution Environment w "UUIFTFDVSJUZMFWFM MFUTEJWFBMJUUMFEFFQFSJOUP5&&  XIJDITUBOETGPS5SVTUFE&YFDVUJPO&OWJSPONFOU B GFBUVSFUIBUBMMPXTDSJUJDBMPQFSBUJPOTUPCFFYFDVUFE

    TBGFMZBOEJOEFQFOEFOUMZPGUIF04 w 5&&IBTCFFOJODMVEFEJOSFDFOU$16T UIFNPTUGBNPVT CFJOH*OUFM4(9 ".%4&7 BOE"3.5SVTU;POF w 5&&POMZQSPWJEFTRVBSBOUJOFFYFDVUJPO BOEUIF QMBUGPSNVTJOH5&&NVTUCFBCMFUPTFDVSFMZIPME TFOTJUJWFJOGPSNBUJPOBOEFOTVSFTBGFUZXIFOFYFDVUJOH 5&&

  24. Trusted Execution Environment w 5&&JTBOJTPMBUFEFYFDVUJPOFOWJSPONFOU CVUUIFSFBSF TFWFSBMPUIFSJTPMBUFEFYFDVUJPOGVODUJPOTCFTJEFT5&& 5IFTFBSFDBMMFE)BSEXBSF*TPMBUFE&YFDVUJPO&OWJSPONFOU )&& 

    w 5&&JTBUZQFPG)&& CVUUIF5SVTUFE1MBUGPSN.PEVMF 51. SVOTPOBTFQBSBUFDIJQUIBUJTDPNQMFUFMZ JOEFQFOEFOUPGUIF$16 w *OUIFDBTFPG51. JUQSPWJEFTLFZHFOFSBUJPO DPO fi EFOUJBM JOGPSNBUJPOTUPSBHF SBOEPNOVNCFSHFOFSBUJPO FUD BOE XPSLTXJUIGVODUJPOTTVDIBT5SVTUFE#PPUBOE#JU-PDLFS w 5&&SVOTJUTPXOPQFSBUJOHTZTUFN DBMMFE5SVTUFE04 PO XIJDIUIF5SVTUFE"QQMJDBUJPO 5" SVOT

  25. ARM TrustZone w "3.5SVTU;POFJTUIFNPTUXJEFMZVTFE5&&BOEJTVUJMJ[FE JOTNBSUQIPOFTBTXFMMBTHBNJOHEFWJDFTTVDIBTUIF /JOUFOEP4XJUDI w 5SVTU;POFIBTBMPOHIJTUPSZ IBWJOHCFFOJOUSPEVDFEJO "3.W,JO

    BOEDSFBUFTBTJOHMFJTPMBUFEFYFDVUJPO FOWJSPONFOUBUCPPUUJNF w *OUIF$PSUFY"BSDIJUFDUVSF XIJDIJTUIFNPTUVTFE 5SVTU;POFUPEBZ BMMQSJWJMFHFTBSFBWBJMBCMFJOUIF5SVTUFE 048IFOBDDFTTFECZUIFPSJHJOBM04 4FDVSF.POJUPS$BMM 4.$ JOTUSVDUJPOTBSFVTFEUPDPNNVOJDBUFXJUIJU w .BOZPGUIFGFBUVSFTPG"3.5SVTU;POFBSFJNQMFNFOUFE CZTPGUXBSF

  26. Intel SGX w *OUFM4(9 4PGUXBSF(VBSE&YFDVUJPO JTBOJTPMBUFE FYFDVUJPOGFBUVSFJOUSPEVDFEJO4LZMBLFBOEMBUFS w 8JUI4(9 UIFPOMZQSJWJMFHFBWBJMBCMFUPUIFVTFSJTUIF

    VTFSMFWFM3JOHJOUIFFYFDVUJPOFOWJSPONFOU DBMMFE &ODMBWF BOEOPUBMMQSJWJMFHFTBSFBWBJMBCMF w "MTP &ODMBWFDBOPOMZVTFBNBYJNVNPG.#PG NFNPSZTQBDF

  27. AMD SEV w ".%4&7 4FDVSF&ODSZQUFE7JSUVBMJ[BUJPO JTBOJTPMBUFE FYFDVUJPOFOWJSPONFOUJOUSPEVDFEJOUIF&1:$TFSJFT4&7 JTBWJSUVBMJ[BUJPOBXBSF5&&JOUFOEFEGPSVTFJOWJSUVBM NBDIJOFTJOUIFDMPVE w

    4&7JTBWJSUVBMJ[BUJPOBXBSF5&&UIBUJTJOUFOEFEUPCF VTFEJOWJSUVBMNBDIJOFTJOUIFDMPVE0OFPGUIFNBJO GFBUVSFTPG4&7JTUIBUJUEPFTOPUQSFQBSFBEFEJDBUFE NFNPSZBSFBGPSUIF5&& CVULFFQTUIF7.FYFDVUJPO JUTFMGTFDSFU w *OPUIFSXPSET CZNBOBHJOHUIFFODSZQUJPOPGUIF7.T NFNPSZBOEWJSUVBMEJTLT UIFIZQFSWJTPSDBOOPUQFFLBUJU w 4PGUXBSFUIBUVTFT4&7JODMVEFT3FEIBUT&OBSY

  28. TEE Case Studies w 5&&JTBMTPVTFEGPSLFZNBOBHFNFOUJOUIF%3.XFUBMLFEBCPVUFBSMJFSJO"OESPJE UIFSFJTBLFZ NBOBHFNFOUNFDIBOJTNDBMMFE,FZNBTUFS XIJDIJTJNQMFNFOUFEPOUIFQSFNJTFPG"3.5SVTU;POF w *OJ04

    TJNJMBSUP"3.5SVTU;POF UIFSFJTBTFDVSJUZQSPDFTTPSDBMMFE4FDVSF&ODMBWF XIJDIJTJOUIF"QQMF 5DIJQ w 4FDVSF&ODMBWFNBOBHFTEBUBGPS5PVDI*%BOE'BDF*% EJTLFODSZQUJPOXJUI'JMF7BVMU BOE'BJS1MBZLFZ NBOBHFNFOU5IJT4FDVSF&ODMBWFJTOPUBDDFTTJCMFGSPNUIFBQQBUBMMBOEJTVQEBUFEXJUIUIFJ04WFSTJPO

  29. Vulnerability of TEE w 5&&JTBOJTPMBUFEFYFDVUJPOGVODUJPOJOUIF$16 CVUTJODFJUEPFTOPUQIZTJDBMMZBMMPDBUFDPSFT JUJTTBJEUP IBWFNBOZWVMOFSBCJMJUJFT w 'PSFYBNQMF

    1SJNF 1SPCF XIJDIFYQMPJUTDBDIFTIBSJOH JTLOPXOUPCFFGGFDUJWFPO*OUFM4(9 BOEBO BUUBDLDBMMFE'PSF4IBEPXDBOCFDBSSJFEPVUCZDPNCJOJOHDBDIFTIBSJOHBOETQFDVMBUJWFFYFDVUJPO KVTU MJLF4QFDUSF XIJDIXBTBIJHIMZQVCMJDJ[FE$16WVMOFSBCJMJUZ w "MTP 5&&JTOPUSFTJTUBOUUP4JEF$IBOOFMBUUBDLT"TZPVDBOTFF 5&&BMTPIBTWVMOFSBCJMJUJFT BOEJUJT JNQPSUBOUUPXPSLXJUI3PPUPG5SVTUUPSFEVDFUIFSJTLBTNVDIBTQPTTJCMF

  30. Decrypt of DRM

  31. About Common-key Cryptography w %3.VTFTTZNNFUSJDLFZDSZQUPHSBQIZ XIFSFUIFLFZTVTFEGPSFODSZQUJPOBOEEFDSZQUJPOBSFUIFTBNF 4JODFTZNNFUSJDLFZDSZQUPHSBQIZDBOCFFBTJMZEFDSZQUFEJGUIFLFZJTMFBLFE JUJTJNQPSUBOUUPEJTUSJCVUF UIFLFZXJUIPVUMFBLJOHJU w

    *OBEEJUJPO QSPDFTTJOHTQFFEJTBLFZGBDUPSGPSTZNNFUSJDLFZDSZQUPHSBQIZ w 5IFSFBSFUXPUZQFTPGTZNNFUSJDLFZDJQIFSTCMPDLDJQIFSTBOETUSFBNDJQIFST

  32. Block Cipher w #MPDLDJQIFSJTBNFUIPEPGFODSZQUJOHQMBJOUFYUCZHSPVQJOHJUJOUPTFWFSBMCMPDLTPGBDFSUBJOTJ[F CMPDLT  5IFDJQIFSUFYUJTUIFTBNFTJ[FBTUIFQMBJOUFYU w 5PFODSZQUQMBJOUFYUUIBUJTMBSHFSUIBOUIFCMPDLTJ[F XFVTFXIBUJTDBMMFEFODSZQUJPONPEF

    w 4JODFCMPDLDJQIFSTBSFQSPDFTTFECZTFQBSBUJOHUIFN UIFQSPDFTTJOHMPBEJTOPUMBSHF w "TBUZQJDBMFYBNQMF "&4DJQIFSTBSFUIFNPTUDPNNPO

  33. Stream Cipher w *ODPOUSBTUUPCMPDLDJQIFST TUSFBNDJQIFSTBSFDSZQUPHSBQIJDNFUIPETUIBUTFRVFOUJBMMZQSPDFTTQMBJOUFYUJO TNBMMVOJUT w 5IFGFBUVSFPGTUSFBNDJQIFSTJTUIBUUIFZQFSGPSNFODSZQUJPOBOEEFDSZQUJPOCZUBLJOHUIFFYDMVTJWFMPHJDBM 03 903

    PGUIFQMBJOUFYUBOEUIFLFZ w $PNQBSFEUPCMPDLDJQIFST TUSFBNDJQIFSTBSFGBTUFSCVUMFTTFG fi DJFOUCFDBVTFUIFZBSFQSPDFTTFEJOTNBMMFS VOJUT TPUIFSFBSFBEWBOUBHFTBOEEJTBEWBOUBHFT w 4USFBNDJQIFSTBSFVTFEGPSFODSZQUJPOJOXJSFMFTT-"/T w 5IFTFUXPNFUIPETDBOCFVTFEUPFODSZQUTZNNFUSJDLFZDJQIFST CVUJGUIFPVUQVUSFTVMUJTUIFTBNFFBDI UJNF UIFSFJTBSJTLPGCFJOHHVFTTFEGSPNUIFSF

  34. IV w 5PQSFWFOUUIJT BO*7 *OJUJBMJ[BUJPO7FDUPS JTVTFE XIJDIJTBSBOEPNTFRVFODFPGCJUTJOTFSUFEJOCFUXFFO UPNBLFUIFEBUBIBSEFSUPEFDJQIFS DIBOHJOHUIFPVUQVUSFTVMUFBDIUJNFUPQSFWFOUHVFTTJOH w

    *OUIFDBTFPGCMPDLDJQIFST UIF*7SFGFSTUPUIFQMBJOUFYUBOEUIFQSFWJPVTFODSZQUFECMPDL BOEUIFSFTVMU PGUIF903CFDPNFTUIFDJQIFSUFYUPGUIFOFYUCMPDL5IF*7JTVTFEXIFOFODSZQUJOHGPSUIF fi STUUJNF w *OUIFDBTFPGTUSFBNDJQIFST BQTFVEPSBOEPNOVNCFSHFOFSBUPS 4FFE JTVTFEUPDSFBUFUIFDJQIFSUFYU  BOE*7JTVTFEUPFMJNJOBUFUIFCJBTPGUIF4FFE w 5IJTJTIPXTZNNFUSJDLFZDSZQUPHSBQIZXPSLT BOEUIFSFBSFTFWFSBMUZQFTPG%3.UIBUVTFUIJTNFDIBOJTN GPSFODSZQUJPO

  35. CBR w 'JSTUPGBMM MFUTUBMLBCPVU$#$ $JQIFS#MPDL$IBJOJOH XIJDIJTBCMPDLDJQIFSTDIFNFUIBU fi STU903TXJUI *7 UIFO903TUIFQSFWJPVTDJQIFSCMPDLXJUIUIFQMBJOUFYUCMPDL

    BOETPPOVOUJMUIFFOE w 4JODF$#$JTCBTFEPOUIFQSFWJPVTCMPDL QBSBMMFMQSPDFTTJOHJTOPUQPTTJCMF BOEJGUIFCMPDLTJ[FJTOPUNFU  UIFEBUBNVTUCF fi MMFEXJUIQBEEJOH

  36. CTR w /FYU MFUTUBMLBCPVU$53 $06/5FS XIJDIBMTPVTFTBCMPDLDJQIFS CVUQSFQBSFTBDPVOUFSUIBUJODSFNFOUT CZPOF FODSZQUTJU BOE903TUIFPVUQVUDJQIFSUFYUXJUIUIFQMBJOUFYUCMPDL5IJTBMMPXTUIFCMPDLDJQIFSUP

    CFUSFBUFEBTBTUSFBNDJQIFS BOETJODFOPQBEEJOHPSPUIFSQSPDFTTJOHJTSFRVJSFE JUIBTHPPEQFSGPSNBODF BOEDBOCFFYFDVUFEJOQBSBMMFM w $53VTFTBEJTQPTBCMFSBOEPNOVNCFSDBMMFEBOPODFBTBDPVOUFS XIJDIQSFWFOUTUIFSFTVMUGSPNCFJOH fi YFE

  37. AES-128 w 5IF fi STUPOFJT"&4"TUIFOBNFTVHHFTUT UIJTFODSZQUTXJUI"&4BOEVTFTFJUIFS$#$PS$53BT UIFFODSZQUJPONPEF5IJTJTTJNQMFBOEFBTZUPVOEFSTUBOE

  38. SAMPLE-AES w /FYU MFUTUBMLBCPVU4".1-&"&44".1-&"&4FODSZQUTOPUUIFFOUJSFEBUB CVUPOMZBQBSUPGJU XIJDI TQFFETVQUIFQSPDFTTJOHBOESFEVDFTUIFMPBE w 4".1-&"&4JTBMTPDBMMFE$#$4 XIJDIVTFT$#$GPSFODSZQUJPO

  39. MPEG-CENC w /FYU MFUTUBMLBCPVU.1&($&/$ $PNNPO&ODSZQUJPO4DIFNF XIJDIJTBDPNNPOFODSZQUJPOTDIFNF EFWFMPQFECZ.1&(.1&($&/$JTBDPNNPOFODSZQUJPONFUIPEEFWFMPQFECZ.1&(

  40. About FairPlay's Work f low

  41. About FairPlay's Work f low  5IFVTFSPQFOTUIFBQQBOETUBSUTQMBZJOHUIF'BJS1MBZ4USFBNJOHDPOUFOU  "7'PVOEBUJPOQSFQBSFTUPTUBSUQMBZCBDL 

    "7'PVOEBUJPOXJMMGFUDIUIF)-4NBOJGFTU fi MFGSPNUIFTQFDJ fi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

  42. About FairPlay Streaming's Crack w )PXFWFS UIFSFJTOPUIJOHUIBUDBOCFEPOFBHBJOTUBKBJMCSFBL BMUIPVHIJUJTQPTTJCMFUPPCUBJOUIFDPOUFOU LFZTTUPSFEJOTJEFUIFEFWJDFPODFSPPUQSJWJMFHFTBSFPCUBJOFE w

    *OBEEJUJPOUPKBJMCSFBLJOH UIFSFBSFTFWFSBMPUIFSNFUIPETB1P$DBMMFE1TZDIJD1BQFSSFMFBTFEJO.BZ BMMPXTVTFSTUPPCUBJODPOUFOULFZTGPSEFWJDFTSVOOJOHJ04PSMPXFS*UVTFTBWVMOFSBCJMJUZJO UIFDPEFOBNFBOEFYUSBDUTUIFDPOUFOULFZCZVTJOHBNFUIPEUIBUDIFDLTGPSBTQFDJ fi DFOUJUMFNFOU LFZ JO BQSPDFTTDBMMFE*05BTL)BT&OUJUMFNFOUJO9/6 %BSXJO,FSOFM )PXFWFS JUJTJNQPTTJCMFGPSNPTUVTFSTUPHFU UPUIJTQPJOU TPBTBEFWFMPQFSJNQMFNFOUJOH'BJS1MBZ4USFBNJOH ZPVDBOTBGFMZJHOPSFJU3FNFNCFS  IPXFWFS UIBUQFSGFDUJPOEPFTOPUFYJTU

  43. Widevine w 8JEFWJOFJTFODSZQUFEVTJOH.1&($&/$ XIJDISFRVJSFTUIFVTFPG"&4$53BTUIFFODSZQUJPOTDIFNF w 5IFSFBSFUXPUZQFTPG8JEFWJOF 8JEFWJOF$MBTTJDGPSMFHBDZEFWJDFTBOE8JEFWJOF.PEVMBSXIJDIJTDVSSFOUMZ JOVTF w *OPSEFSUPVOEFSTUBOE8JEFWJOF

    UIFSFBSFTPNFBEEJUJPOBMUIJOHTZPVOFFEUPLOPX

  44. CDM w 'JSTU MFUTUBMLBCPVU$%. XIJDITUBOETGPS$POUFOU%FDSZQU.PEVMF UIFNPEVMFUIBUIBOEMFT8JEFWJOF5IF $%.JTCVJMUJOUPFWFSZCSPXTFS CVUUIFTPVSDFDPEFJTOPUQVCMJD w #ZUIFXBZ

    JUJTFBTZUPDIFDLJGB$%.JTQSFTFOUPSOPU'PSFYBNQMF JO(PPHMF$ISPNF USZUZQJOHDISPNF DPNQPOFOUTJOUIFBEESFTTCBSBOEQSFTTFOUFS*GZPVTFF8JEFWJOF$POUFOU%FDSZQUJPO.PEVMFJOUIFMJTU  ZPVDBOCFTVSFUIBUJUJTUIFSF w *OBEEJUJPOUP(PPHMF$ISPNF BMMNBKPSCSPXTFSTTVDIBT.P[JMMB'JSFGPYBOE.JDSPTPGU&EHFIBWFUIJT$%. *ODJEFOUBMMZ JGZPVBSFVTJOH$ISPNJVN JUNBZOPUCFJODMVEFE w 5IFSPMFPGUIF$%.JTUPSFRVFTUBMJDFOTF TUPSFUIFEFDSZQUJPOLFZTBGFMZ QSFWFOUFYUFSOBMBDDFTTUPUIF EFDSZQUFEDPOUFOU PVUQVUUIFWJEFPUPBTFDVSFPVUQVUEFWJDF BOETPPO

  45. EME w 8FIBWFFYQMBJOFEUIBUUIF$%.JTSFTQPOTJCMFGPSUIFNBJOQSPDFTTJOHPG8JEFWJOF5IF$%.JTBDUVBMMZ VQEBUFEQFSJPEJDBMMZBOEDIBOHFTGSFRVFOUMZ#FDBVTFPGUIJT JUJTOPUWFSZQSBDUJDBMUPDBMMUIF$%.GSPNUIF QMBZFS w 5PEFBMXJUIUIJT UIFSFJTBOBCTUSBDUJPOMBZFSDBMMFE&ODSZQUFE.FEJB&YUFOTJPOT &.&

    XIJDIQSPWJEFTBO "1*GPSQMBZFSTUPDPNNVOJDBUFXJUI$%. TPUIBUQMBZFSTDBOJOUFSBDUXJUI$%.CZIJUUJOHUIF&.&"1*5IF DPOUFOUPGUIJT&.&JTB+BWB4DSJQU"1* w &.&JTB8$TUBOEBSE TPJUJTWFSZFBTZUPVTF

  46. About Widevine's Work f low

  47. About Widevine's Work f low  5IFVTFSPQFOTUIFBQQBOETUBSUTQMBZJOHUIF8JEFWJOFDPOUFOU5IFBQQGFUDIFTUIF.1&(%"4)NBOJGFTU fi MF BOEQBSTFTJU*UUIFOWFSJ

    fi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

  48. About Widevine's Crack w 0OFPGUIFNPTUXFMMLOPXOWVMOFSBCJMJUJFTJO8JEFWJOFJTUIF8JEFWJOF-FWFMWVMOFSBCJMJUZEJTDPWFSFEJO +BOVBSZ*UJTEVFUPBQSPCMFNJO8*EFWJOFT"&4JNQMFNFOUBUJPOUIBUBUUFNQUTUPEFDSZQU FODSZQUFENFTTBHFTCZOBSSPXJOHEPXODBOEJEBUFTFDSFULFZTCBTFEPOUIFEJGGFSFODFCFUXFFODPSSFDUBOE FSSPOFPVTDJQIFSUFYUVTJOHBOBUUBDLDBMMFE%JGGFSFOUJBM'BVMU"OBMZTJT %'" 

    w "TNFOUJPOFEBUUIFCFHJOOJOHPGUIJTBSUJDMF 8JEFWJOF-FWFMJTQFSGPSNFEJOBMBZFSUIBUJTOPUQSPUFDUFE CZ5&&5IJTNFBOTUIBUJUJTWFSZWVMOFSBCMFUPFYUFSOBMBUUBDLT*UJTBMTPTBJEUIBUUIFTFWVMOFSBCJMJUJFTBSF OPUMJLFMZUPCF fi YFEBTUIFZBSFQSPCMFNTJOUIF8JEFWJOFTQFDJ fi DBUJPO w )PXFWFS XJUI-FWFM )%DPOUFOUDBOOPUCFQMBZFE SFTVMUJOHJOMPXSFTPMVUJPOWJEFP&WFOJGJUDPVMECF EFDSZQUFE UIFRVBMJUZXPVMECFTPQPPSUIBUJUXPVMECFFOPVHIUPXBUDI w 8JEFWJOFJTUIVTBUSJTLPGCFJOHWVMOFSBCMF)PXFWFS 8JEFWJOFBMMPXTEFWFMPQFSTUPTQFDJGZUIFUPMFSBODF MFWFM*OUIJTDBTF -FWFMXBTUBSHFUFE CVUJUJTQPTTJCMFUPBWPJEUIJTEBOHFSCZTFUUJOHPOMZ-FWFMBOE -FWFM

  49. About Widevine's Crack w *OBEEJUJPOUPUIJTWVMOFSBCJMJUZ UIFSFBSFNBOZPUIFSQSPCMFNTXJUI8JEFWJOFUIBUDBOOPUCFTPMWFECZUIF TQFDJ fi DBUJPO'PSFYBNQMF DBQUVSFQSFWFOUJPO

    w *O8JEFWJOF *NFOUJPOFEFBSMJFSUIBU$%.BMTPIBOEMFTUIFWJEFPQSPDFTTJOH CVUUFDIOJDBMMZ $%.JT SFTQPOTJCMFGPSQBTTJOHUIFEFDSZQUFESBXEBUBUPUIFWJFXFS*OPUIFSXPSET UIFQMBZCBDLJUTFMGJTOPUVOEFS UIFKVSJTEJDUJPOPG$%.5IFSFGPSF TDSFFOTIPUTBSFQPTTJCMF)PXFWFS XIFOJUDPNFTUPTDSFFODBQUVSF $%. IJUTUIF04"1* BOEXIFOZPVDBQUVSF UIFWJEFPJUTFMGJTSFDPSEFEJOCMBDL CVUUIFBVEJPDBOCFDBQUVSFEBT JT w "TZPVDBOTFF 8JEFWJOFJUTFMGJTRVJUFJNQFSGFDU5IFSFGPSF JUJTOFDFTTBSZUPJNQMFNFOUBXBZUPQSFWFOU UIFWJEFPGSPNCFJOHFYUSBDUFEPOUIFBQQMJDBUJPOTJEFJOBDDPSEBODFXJUI8JEFWJOF w 'PSFYBNQMF JOUIFDBTFPG"OESPJE JUJTQPTTJCMFUPVTF4FDVSF'MBHUPQSFWFOUTDSFFOTIPUTGSPNCFJOHUBLFO JOUIF fi STUQMBDF#ZBQQMZJOHUIFTFNFUIPET JUJTQPTTJCMFUPQSFWFOUDBQUVSFDPNQMFUFMZ)PXFWFS UIJTJT POMZGPSOBUJWFBQQMJDBUJPOT TPJUXJMMOPUXPSLGPSCSPXTFST

  50. PlayReady w 1MBZ3FBEZJTUIFMFBTUVTFEPGUIFNBKPS%3.TZTUFNT CVUJUJTBDUVBMMZVTFEJOTPNFDBTFTJO"OESPJE BOE TJODFPOMZ1MBZ3FBEZJTTVQQPSUFEGPSQMBZCBDLJO*OUFSOFU&YQMPSFS UIFSFBSFNBOZDBTFTXIFSFJUJTVTFE VOFYQFDUFEMZ w 5IJT1MBZ3FBEZXBTPSJHJOBMMZDSFBUFEJOBQMVHJOGPSWJEFPQMBZCBDLDBMMFE.JDSPTPGU4JMWFSMJHIU"MUIPVHI

    4JMWFSMJHIUJTOPMPOHFSJOVTF UIF1MBZ3FBEZNFDIBOJTNSFNBJOTBOEJTTUJMMJOVTF w 1MBZ3FBEZ IPXFWFS TVQQPSUTCPUI$53BOE$#$DJQIFSTVJUFT TPZPVDBOVTFFJUIFSPOFXJUIPVUBOZ QSPCMFNT w 0OFPGUIFNBJOGFBUVSFTPG1MBZ3FBEZJTJUTBDDPVOUUBLJOHDBQBCJMJUZ5IJTJTRVJUFTJNJMBSUPUIFDPODFQUPG "DUJWF%JSFDUPSZ XIFSFUIFSFJTBMTPBDPODFQUDBMMFEBEPNBJODPOUSPMMFS%PNBJODPOUSPMMFSTBMMPXMJDFOTFT UPCFTIBSFEBDSPTTNVMUJQMFEFWJDFT5IFSFJTBMTPBDPODFQUDBMMFEBNFUFSJOHTFSWFS XIJDIBMMPXTUIFDMJFOU TJEFUPTUPSFUIFOVNCFSPGQMBZT5IFOVNCFSPGUJNFTBWJEFPJTQMBZFEDBOCFTFOUUPUIFTFSWFS XIJDIDBO CFVTFEUPJNQMFNFOUBTZTUFNUIBUDIBSHFTGPSUIFOVNCFSPGUJNFTBWJEFPJTXBUDIFE

  51. PlayReady Work f low

  52. About PlayReady's Work f low  *OUIFDBTFPG1MBZ3FBEZ JUTUBSUTXJUIFODSZQUJOHUIFDPOUFOU'JSTU UIFQBDLBHFEDPOUFOUJTFODSZQUFE BOE

    UIFOUIFDPOUFOUJTQMBDFEJO4PSTPNFPUIFSMPDBUJPO"UUIJTQPJOU UIFMJDFOTFLFZBOEFODSZQUJPOLFZBSFTFOU UPUIFMJDFOTFTFSWFS BOEUIFEPNBJOJOGPSNBUJPOJTTFOUUPUIFEPNBJOTFSWFS  8IFOUIFBQQQMBZTUIF1MBZ3FBEZDPOUFOU JUGFUDIFTUIFNBOJGFTUBOEDIFDLTJGJUJTFODSZQUFECZ1MBZ3FBEZ*G JUJTFODSZQUFE JUTFOETUIFJOGPSNBUJPOUP1MBZ3FBEZT$%.UISPVHI&.&5IJT fl PXJTTJNJMBSUP8JEFWJOFUIF $%.DSFBUFTBMJDFOTFSFRVFTUBOEQBTTFTUIFSFRVFTUUPUIFQMBZFSTJEFUISPVHIUIF&.&5IFQMBZFSTFOETUIF MJDFOTFSFRVFTUUPUIFMJDFOTFTFSWFS5IFQMBZFSTFOETUIFMJDFOTFSFRVFTUUPUIFMJDFOTFTFSWFS XIJDIBMTPTFOET UIF,FZ*% BVOJRVFWBMVF (6*% BTTPDJBUFEXJUIFBDIQJFDFPGDPOUFOU  5IFMJDFOTFTFSWFSSFDFJWFTUIFSFRVFTUBOEVTFTUIF,FZ*%UP fi OEUIFDPSSFTQPOEJOHMJDFOTF*GUIFSFJTB DPSSFTQPOEJOHMJDFOTF JUFODSZQUTUIFLFZUPEFDSZQUUIFDPOUFOUBOEUIFMJDFOTFJOGPSNBUJPOBOETFOETJUUPUIF BQQ  5IFBQQSFDFJWFTUIFFODSZQUFESFRVFTUGSPNUIFMJDFOTFTFSWFSBOEQBTTFTJUUPUIF$%.WJB&.&  5IF$%.VTFTBIBSEXBSFDPNQPOFOUUPEFDSZQUUIFFODSZQUFESFRVFTU FYUSBDUTUIFLFZOFFEFEUPEFDSZQUUIF DPOUFOUGSPNJU BOEEFDSZQUTUIFDPOUFOU*OEPJOHTP JUBMTPQSPWJEFTUIFDMJFOUXJUIBMJDFOTFTUPSFUPTUPSFUIF EFDSZQUFELFZT

  53. Advantages of PlayReady over Widevine w 1MBZ3FBEZJTTJNJMBSUP8JEFWJOF BOEBMTPEPFTOUIBWFNBOZBEWBOUBHFTOPXUIBU.JDSPTPGU&EHFIBTCFFO $ISPNJVNJ[FE CVUJUTJOUFHSBUJPOXJUIUIF04JTWFSZTUSPOH

    BOE1MBZ3FBEZBMMPXTZPVUPEPUIJOHTMJLF QSFWFOUDBQUVSF XIJDIXBTBESBXCBDLPG8JEFWJOF XJUIPVUDIBOHJOHJU w *OGBDU /FU fl JYVTFT1MBZ3FBEZJOTUFBEPG8JEFWJOFXIFOXBUDIJOHPO.JDSPTPGU&EHF JOEJDBUJOHUIBU 1MBZ3FBEZJTNPSFTFDVSFUIBO8JEFWJOFXIFOUBSHFUJOH8JOEPXTVTFST w "MTP JOUIFDBTFPG1MBZ3FBEZ TJODFJUJTIBOEMFECZUIF8JOEPXT3VOUJNF"1* 8JO35 JUJTVMUJNBUFMZ IBOEMFECZUIF/5LFSOFM4P UIFSFJTOPOFFEUPXPSSZBCPVUCFJOHFYUSBDUFEGSPNUIFPVUTJEF

  54. Hardware Security

  55. About Android Media Services w "OESPJEIBTIBENBOZWVMOFSBCJMJUJFTJOUIFQBTU NBOZPGXIJDIBSFSFMBUFEUPNVMUJNFEJB%FDPEJOHBO BSCJUSBSZWJEFP fi MFDBODBVTFBCVGGFSPWFS

    fl PXUIBUDBOCFVTFEUPFYFDVUFBSCJUSBSZDPEF XIJDIIBTCFFOB QSPCMFN w *OSFTQPOTF (PPHMFIBTNPWFETFSWJDFTUIBUIBOEMFTPGUXBSFDPEFDTUPBDPOTUSBJOFETBOECPY TUBSUJOHXJUI "OESPJE SFMFBTFEJO w 5IJTJNQSPWFETFDVSJUZCZJTPMBUJOHUIFWBSJPVTDPNQPOFOUTJOUPBTBOECPYXIFSFUIFZDPVMEOPUSVOXJUI QSJWJMFHFT w *OUIJTDPOTUSBJOFETBOECPY QSPDFTTFTSVOXJUIJOTUSVDUJPODBMMSFTUSJDUJPOTBOEJOUIF4&-JOVYEPNBJO'PS UIFJOTUSVDUJPODBMMSFTUSJDUJPO XFVTFTFDDPNQ BGFBUVSFPGUIF-JOVY,FSOFM w *OBEEJUJPO .FEJB$PEFDBOE.FEJB&YUSBDUPS XIJDIQSFWJPVTMZSFRVJSFE04VQEBUFT DBOOPXCFQBSUJBMMZ VQEBUFE5IJTJTBQBSUJBMVQEBUFUP.FEJB$PEFDBOE.FEJB&YUSBDUPS XIJDIVTFEUPSFRVJSFBO04XJEF VQEBUFUPBEESFTTWVMOFSBCJMJUJFTJO"OESPJEBOEFBSMJFS

  56. History of Android privileges w "OESPJE2TUBOETGPS "OESPJE01GPS "OESPJE/ GPS BOE"OESPJE.GPS

    w 1SJPSUP"OESPJE NFEJBTFSWFSXBTBTJOHMFQSPDFTTGPS NFEJBIBOEMJOH XJUIPOMZ&YUSBDUPSSVOOJOHTFQBSBUFMZ w 8JUI"OESPJE UIJTIBTCFFOSFEFTJHOFEBOEFBDI QSPDFTTJTOPXTQMJUJOUPTFQBSBUFQSPDFTTFT5IJTXBTUIF fi STUUJNFUIF&YUSBDUPSXBTQMBDFEJOBDPOTUSBJOFE TBOECPY w /FYUDBNF"OESPJE XJUIFWFONPSFDPOTUSBJOUT4JODF UIFSFBSFOPDIBOHFTJO"OESPJE UIFZBSFTIPXO UPHFUIFSJOUIJT fi HVSF

  57. History of Android privileges w "OEUIFOUIFSFJT"OESPJE)FSFUIFTPGUXBSFDPEFDT IBWFCFFOTFQBSBUFEGSPN.FEJB$PEFDBOESFUVSOFEUPUIF TZTUFNTJEF)FSF 4&-JOVYBOETFDDPNQQPMJDJFTIBWF CFFOHSFBUMZTUSFOHUIFOFE

    BOEOPXTPGUXBSFDPEFDTBSF OPUBMMPXFEUPBDDFTTEFWJDFESJWFSTUIBUQSFWJPVTMZ IBOEMFEDPEFDTGPSIBSEXBSFBDDFMFSBUJPO5IJTJOJUJBUJWFJT QBSUJDVMBSMZFGGFDUJWFCFDBVTFTPGUXBSFDPEFDT USBEJUJPOBMMZVTFBWBSJFUZPGMJCSBSJFTUPQBSTFCJUTUSFBNT GSPNVOUSVTUFETPVSDFT5IJTXBTBCSFFEJOHHSPVOEGPS WVMOFSBCJMJUJFT CVUCZSFTUSJDUJOHUIFVTFPGDPOTUSBJOFE TBOECPYFTBOEMJNJUJOHBDDFTTUPEFWJDFESJWFST XFXFSF BCMFUPTJHOJ fi DBOUMZSFEVDFUIFWVMOFSBCJMJUJFT w *OUIJTXBZ XIFOQSPDFTTJOHJTEPOFJOIBSEXBSF TFDVSJUZ JTFOTVSFECZSFTUSJDUJOHUIFCFIBWJPS

  58. Implement Security Sandbox using Unikernel

  59. The relationship between 
 FFmpeg and Libav w ''NQFHXBTPODFTQMJUJOUPBTPGUXBSFDBMMFE-JCBWJO .BSDIEVFUPDPO

    fl JDUTJOUIFEFWFMPQNFOUTUSVDUVSF "UUIFUJNF %FCJBOBEPQUFE-JCBW BOEUIFSFXBTBCJH GVTTBCPVUJU w )PXFWFS JO+VMZ %FCJBOBOOPVODFEUIBUUIFZXFSF HPJOHCBDLUP''NQFH5IFSFBTPOGPSUIFNPWFCBDLXBT UIBU''NQFHXBTGBTUFSUPEFWFMPQBOEGBTUFSUPBEESFTT WVMOFSBCJMJUJFT5IJTIBTMFEUPBUSFOECBDLUP''NQFH BOE -JCBWIBTTUPQQFESFMFBTJOHTJODFJUTSFMFBTFJO w *OFGGFDU XFWFHPOFCBDLUP''NQFH CVUUIFDPEFBEEFE JO-JCBWIBTOUNBEFJUJOUP''NQFHZFU w /PX UIFSFBTPOXIZ*NFOUJPOFE-JCBWIFSFJTCFDBVTF* XSPUF-JCBWJOVQQFSDBTF CVUUIFSFJTBMPXFSDBTFMJCBW

  60. about "libav" w 5IJTMJCBWEFOPUFTBMJCSBSZJO''NQFH4QFDJ fi DBMMZ UIF DPEFDMJCSBSZMJCBWDPEFD UIFDPOUBJOFSMJCSBSZMJCBWGPSNBU 

    BOEUIF fi MUFSMJCSBSZMJCBWGPSNBUBSFDPMMFDUJWFMZDBMMFE MJCBW w #BDLUPUIFUPQJDBUIBOE ''NQFHIBTBTFUPGMJCSBSJFT DBMMFEMJCBW5IJTTFUPGMJCSBSJFTJTVTFEFWFSZXIFSF

  61. About the license of FFmpeg w )PXFWFS JUJTJNQPSUBOUUPOPUFUIBUUIFSFBSFNBOZ VOPG fi

    DJBMDPEFDJNQMFNFOUBUJPOTJOMJCBWDPEFD.BOZPG UIFNBSFJNQMFNFOUFECZBOBMZ[JOHWJEFPPSBVEJP fi MFT PS CZBOBMZ[JOH%--TUIBUQSPWJEFDPEFDT BOEDBMDVMBUJOHUIF FODPEJOHQSPDFTTCBDLXBSETGSPNUIFSF w *OBEEJUJPO ''NQFHBTBXIPMFJTMJDFOTFEVOEFSUIF-(1-  XIJDIJODMVEFTMJCBW5IFSFGPSF JGZPVXBOUUPVTFJU DPNNFSDJBMMZ ZPVOFFEUPEJTDMPTFUIFTPVSDFDPEF*O BEEJUJPO JGZPVXBOUUPVTF.1&(SFMBUFEUFDIOPMPHJFT  ZPVOFFEUPQBZBMJDFOTFGFFUP.1&(-"

  62. Vulnerability of FFmpeg w 8FMM ''NQFHIBTBMPUPGWVMOFSBCJMJUJFT5IFSFBTPOXIZ UIFSFBSFTPNBOZJTUIBUUIFSFBSFNBOZUIJOHTJO''NQFH UIBUBSFOPUNBJOUBJOFE BOEBT*FYQMBJOFEFBSMJFS UIFTF

    BSFUIJOHTUIBUBSFJOUIFHSBZ[POF5IJTJTXIZ$7&TBSF GSFRVFOUMZJTTVFE CVUGSPNUIFTUBOEQPJOUPGEFWFMPQFST VTJOHMJCBW UIFSFBSFNBOZBEWBOUBHFTUPVTJOHMJCBWUP EFWFMPQVTFGVMTPGUXBSFXIJMFCFJOHBXBSFPGTFDVSJUZ w *UJTWFSZEJG fi DVMUUPNBJOUBJOBOEPQFSBUFBCBMBODF CFUXFFOUIFTFUXP w 5IJTJTXIZ*BEWPDBUFUIFBQQSPBDIPGSVOOJOHUIF TPGUXBSFPOBTFDVSJUZTBOECPYVTJOH6OJLFSOFM w 'JSTUPGBMM *XPVMEMJLFUPFYQMBJOBCPVU6OJLFSOFM

  63. Unikernel w 6OJLFSOFMJTBCVOEMFPGTQFDJ fi DBQQMJDBUJPOQSPHSBNT B TNBMM04KVTUUPSVOUIFN BOEUIFOFDFTTBSZDPO fi HVSBUJPO

    fi MFT w "MJCSBSZCBTFE04JTPOFJOXIJDI04GVODUJPOTBSF JNQMFNFOUFEBTMJCSBSJFT BMMPXJOHBQQMJDBUJPOTUPEJSFDUMZ BDDFTTIBSEXBSFXJUIPVUFYDIBOHJOHJOGPSNBUJPOCFUXFFO VTFSTQBDFBOELFSOFMTQBDF w )PXFWFS JOPSEFSUPBDDFTTIBSEXBSF BESJWFSNVTUCF XSJUUFOGPSUIFMJCSBSZCBTFE04 XIJDIJTBIFBWZCVSEFO w 5PTPMWFUIJTQSPCMFN 6OJLFSOFMJTBUFDIOPMPHZUIBUSVOT POBWJSUVBMFOWJSPONFOU

  64. Midori w 8IFOXFUBMLBCPVU6OJLFSOFM UIFSFJTPOFUIJOHUIBUXF TIPVMEOPUGPSHFU*UJTBQSPKFDUDBMMFE4JOHVMBSJUZUIBU .JDSPTPGU3FTFBSDIVTFEUPEPSFTFBSDIBOEEFWFMPQNFOU PO w 5IF4JOHVMBSJUZQSPKFDUIBTCFFOVOEFSSFTFBSDIBOE EFWFMPQNFOUGPSNPSFUIBOZFBST

    BOEJUTSFTVMUTIBWF DPOUSJCVUFEUPUIFEFWFMPQNFOUPGBOPQFSBUJOHTZTUFN DBMMFE.JEPSJ w )PXFWFS .JEPSJXBTOFWFSSFMFBTFEBOEJUXBTTBJEUIBU UIFQSPKFDUXBTQSBDUJDBMMZEJTCBOEFE w +PF%VGGZ BGPSNFSQSPKFDUNFNCFS UBMLFEBCPVU.JEPSJPO IJTCMPHJO/PWFNCFS TPJGZPVSFJOUFSFTUFEJOUIF QSPKFDU QMFBTFWJTJU+PFTCMPH

  65. MirageOS w .JSBHF04JTBMJCSBSZPQFSBUJOHTZTUFNUIBUDPOTUSVDUT VOJLFSOFMTGPSTFDVSF IJHIQFSGPSNBODFOFUXPSL BQQMJDBUJPOTBDSPTTBWBSJFUZPGDMPVEDPNQVUJOHBOE NPCJMFQMBUGPSNT$PEFDBOCFEFWFMPQFEPOBOPSNBM04 TVDIBT-JOVYPSNBD04 BOEUIFODPNQJMFEJOUPBGVMMZ TUBOEBMPOF

    TQFDJBMJTFEVOJLFSOFMUIBUSVOTVOEFSB9FOPS ,7.IZQFSWJTPS

  66. MirageOS w /PXUIBUXFIBWFUBMLFEBCPVU6OJLFSOFM *XPVMEMJLFUP UBMLBCPVUIPXUPBDUVBMMZSVO6OJLFSOFM w 8IFOXFSVO6OJLFSOFM XFOFFEUPUBLFDBSFPGTFDVSJUZ *UJTJNQPSUBOUUPLFFQBDDFTTUPBNJOJNVNJOPSEFSUP SFEVDFUIFSJTLPGFYUFSOBMBUUBDLT5IFTBNFDBOCFTBJE

    GPSSVOOJOHUIF6OJLFSOFM w 5IFTBNFDBOCFTBJEGPSSVOOJOHUIF6OJLFSOFM5IFSFJTB TPGUXBSFDBMMFE4PMPUIBUQSPWJEFTBOFOWJSPONFOUUIBUJT FBTZUPSVOXIJMFLFFQJOHUIFTFUIJOHTJONJOE

  67. Solo5 w 4PMPJTUIFTPGUXBSFUIBUNFEJBUFTCFUXFFOUIF04MBZFS BOEUIFQMBUGPSNMBZFS BOECZQSPWJEJOHBDPNNPO"1* UIBUJOUFSBDUTXJUIUIF04MBZFS UIF04MBZFSJUTFMGDBOSVO XJUIPVUSFHBSEUPUIFQMBUGPSN

  68. Solo5 w 5IFSFBSFBMTPUXPNBJOQMBUGPSNMBZFSTUIBU4PMPDBO VTF w 5IF fi STUPOFJTIWU )BSEXBSF7JSUVBMJ[FE5FOEFS XIJDI

    VTFT,7.GPS-JOVYBOEWNNGPS#4% w 5IFTFDPOEJTTQU 4BOECPYFE1SPDFTT5FOEFS TQUVTFT UIFTFDDPNQQPMJDZBTJO"OESPJE w 5IFNBJOEJGGFSFODFCFUXFFOIWUBOETQUJTUIBUIWUSVOT BTBWJSUVBMNBDIJOFCZFYDIBOHJOH"1*TXJUI,7. XIJMF TQUDBOSVOBTBTJOHMFQSPDFTTPO-JOVYCZSFTUSJDUJOH TZTUFNDBMMT

  69. Applied research using Unikernel w *BNVTJOHUIJT6OJLFSOFMJONZSFTFBSDIUPSVOUIFBQQMJDBUJPOJNQMFNFOUFEJOMJCBWBTNFOUJPOFEFBSMJFS &WFOJGBCVGGFSPWFS fl PXPDDVSTXIFOEFDPEJOHJMMFHBMWJEFPEBUB UIFIPTUTJEFJTQSPUFDUFECZ6OJLFSOFM

     TPUIFSFJTOPOFFEUPXPSSZBCPVUEBNBHFUPUIFIPTUTJEF

  70. Applied research using Unikernel w *OBEEJUJPO UIF6OJLFSOFMJTOPXCFJOHBDUJWFMZVTFEJO*P5EFWJDFT0SJHJOBMMZ TFDVSJUZJTWFSZJNQPSUBOUGPS *P5EFWJDFTCFDBVTFUIFZDPNNVOJDBUFXJUIUIF*OUFSOFUXJUIGFXSFTPVSDFT*UJTTBJEUIBUUIFTFDVSJUZPG *P5DBOCFHVBSBOUFFECZVTJOHUIF6OJLFSOFM

    BOESFTFBSDIPOUIJTUPQJDJTJOQSPHSFTT w *OUIFNVMUJNFEJBXPSME UIFSFBSFNBOZBSFBTUIBUBSFRVJUFDPOOFDUFEUP*P5'PSFYBNQMF JUJTJOWPMWFEJO NBOZBSFBTTVDIBTTVSWFJMMBODFDBNFSBT ESJWJOHSFDPSEFSTJODBST BOENPSFSFDFOUMZ UIFSNPHSBQIZUP NFBTVSFCPEZUFNQFSBUVSF)PXFWFS NVMUJNFEJBJTBWFSZUSBDUBCMFFOUSZQPJOUGPSBOBUUBDLFSUPCSFBLJO  BOEVQMPBEJOHWJEFPPSBVEJP fi MFTDBODBVTFUIFJOUFOEFECFIBWJPS*OPSEFSUPQSFWFOUUIFTFQSPCMFNT * XJMMCFDPOEVDUJOHGVUVSFSFTFBSDIVTJOHUIF6OJLFSOFM w "UUIFNPNFOU *BNPOMZBCMFUPSVOTPGUXBSFDPEFDT CVU*UIJOLJUXPVMECFJOUFSFTUJOHUPFWFOUVBMMZ TVQQPSU$6%"BOEIBSEXBSFDPEFDTBTXFMM

  71. Conclusion

  72. Conclustion w 5PEBZ *JOUSPEVDFEUIFUPQJDPGNVMUJNFEJBTFDVSJUZGSPNUIFQFSTQFDUJWFPGCPUITPGUXBSFBOEIBSEXBSF w *OQBSUJDVMBS *XPVMEMJLFUPUBMLBCPVUNZFGGPSUTVTJOH6OJLFSOFM XIJDIJTBQSPKFDUUIBU*IBWFCFFO XPSLJOHPOQFSTPOBMMZXJUIPVUBOZDPOOFDUJPOUPBDPNQBOZ CVUXIJDI*IPQFUPDPMMBCPSBUFXJUIWBSJPVT

    QFPQMFTPPO w *GZPVBSFJOUFSFTUFEJOUIJTQSPKFDU QMFBTFDPOUBDUNF*GZPVBSFJOUFSFTUFE QMFBTFDPOUBDUNFBOEMFUT XPSLUPHFUIFSUPDSFBUFBOJOUFSFTUJOHQSPKFDU

  73. Thank you!