Battelle’s Chris Domas to reveal vulnerabilities revealed by new Sandsifter toolset at Black Hat 2017
COLUMBUS, Ohio (July 25, 2017)—Most computers are run by x86 processors. Most security tools cannot check hardware for vulnerabilities, in the way they can probe software. Now, Battelle has developed a new way to peek into these processors to reveal the inner workings of what has been referred to as an inaccessible “black box.”
Chris Domas, a cyber scientist, will share a Battelle-developed tool called Sandsifter with attendees of Black Hat 2017 in Las Vegas during a presentation July 27 from 5-6 p.m. Domas will talk about the vulnerabilities his team has found using Sandsifter, which will be open-sourced, so attendees can check it out.
“This is the first tool of its kind,” Domas said. “This gives us a way to glimpse inside the processor to see what it’s doing and to look for flaws and vulnerabilities, or just anything that we didn’t anticipate.”
While Domas will not reveal any earth-shattering news about specific processors, “We have found some interesting things with this tool. Nothing critical, but it’s a little unnerving to know there’s something there you didn’t anticipate,” he said.
In its 20th year, Black Hat is the world’s leading information security event providing attendees with the latest in research, development and trends. This will be the third time Battelle’s Domas has presented.
For more than a decade, Battelle has been trusted by elite government clients to solve some of their most perplexing cyber challenges and prepare for the changing cyber landscape of tomorrow.
Every day, the people of Battelle apply science and technology to solving what matters most. At major technology centers and national laboratories around the world, Battelle conducts research and development, designs and manufactures products, and delivers critical services for government and commercial customers. Headquartered in Columbus, Ohio since its founding in 1929, Battelle serves the national security, health and life sciences, and energy and environmental industries. For more information, visit www.battelle.org.