NSA Playset: PCIe

No ratings

Presented at BSidesPDX 2014 by

Hardware hacks tend to focus on low-speed(jtag, uart) and external(network, usb) interfaces, and PCI Express is typically neither. After a crash course in PCIe Architecture, I'll demonstrate a handful of hacks showing how pull PCIe outside of your system case and add PCIe slots to systems without them, including embedded platforms. I'll top it off with a demonstration of SLOTSCREAMER, an inexpensive device configured to access memory and IO, cross-platform and transparent to the OS - all by design with no 0-day needed. The open hardware and software framework that we will release will expand your NSA Playset with the ability to tinker with DMA attacks to read memory, bypass software and hardware security measures, and directly attack other hardware devices in the system. Anyone who has installed a graphics card has all the hardware experience necessary to enjoy this talk and start playing NSA at home! Joe FitzPatrick (@securelyfitz) has over a decade of experience in hardware debug, reverse engineering, and hardware security. Joe holds a master’s degree in Electrical Engineering with a focus on information security. Previously, he performed silicon debug and hardware penetration testing of desktop and server microprocessors, as well as security validation training for functional validators worldwide.