ACPI 5.0 Rootkit Attacks Againts Windows 8 presented at SysCan 2012

by Alex Ionescu,

Tags: Rootkits Windows 8 ACPI

Summary : This talk will disclose certain new features of the ACPI 5.0 Specification which is now public and was primarily designed to support ACPI on ARM Embedded SoCs for the upcoming release of Windows 8. Some of these new features have important security considerations which have not been traditionally monitored by security products and/or users, specifically in the areas of covert code execution at Ring 0 privileges.