When we are developing SW products over Win\Linux or other modern OS the defense in depth mechanisms are well known and relatively easy to implement. When we move down the rabbit hole over the BIOS and below the FW those mechanisms are becoming more and more complex and rare. If we are looking on non-IA or ARM like MIPS, ARC or Tensilica that knowledge is even poorer and hard to get.
The session will cover all developer defenses and will explain how to use stack shadow, stack checker, MMU/MPU for achieving DEP, how to implement self-stack canary and how to use CPU’s debugging features to detect stack overflows or underflows, other embedded OS security enhancements, memory protection mechanisms…