Security Headlines - DynaGuard special

Security Headlines - DynaGuard special with Theofilos Petsios

dynaguard Security headlines

In this episode of Security Headlines, we are joined by a great mind in the
memory security space. A spark was created when Theofilos peaked
into the realms of security. So he packed his bag and got to the next
plane to the US in order to deep-dive more into the security field during
his studies. He became fascinated by the world of writing exploits
and “smashing the stack” as we say in the hacking field. He is a
brilliant guy when it comes to memory attack and he has co-written a
solution that solves the stack canary problem.
We had the chance to sit down with Theofilos Petsios and
get to hear his view on security, development and a lot more.
That you can tune into right here:

Stack canaries is a security mitigation technique that has been widely
adopted and you will find it in most systems today. But does it really work?

Topics that we touch upon in this episode:

Stack canaries

Address layer space randomization

Blind Return Oriented Programming (BROP)

Return Oriented Programming

Static code analysis

Rest in peace Andrea Bittau

security mitigations

Write Xor Execute(W^X)


Where stack canaries fail and the operating systems approach to it.

hardening systems

where the future of security is going

CVE’s over time

Memory corruption bugs

builtin security in the compilers

Security vs Overhead

Using memory in the Thread-local storage

adoption of security mitigations

stack clash

Pin, Intel’s dynamic binary instrumentation framework

Defense Advanced Research Projects Agency

whitepapers and Proof of concepts


building better security tools

Cost vs benefit in the security field

Switching from userspace to kernel space mitigations


secure codebases

formal verifications

“Stack canaries is just one little stone, one a the beach that keeps getting hit by big waves”