0

In a security assessment, the following statements were given:

Threat: Spoof a device and modify RAM to add program code and change data.

Skill: Simple training of a unskilled person

Since an unskilled person can perform the attack, I assume that the device to perform the attack is available on the market. So that's what I'm looking for:

  • Mini PCIe-Card
  • allowing to copy 512 MB RAM of the host device
  • transfer the data out of the device in any kind (e.g. wireless or by storing on a SD card and then removing the Mini PCIe card again)
  • cost < 500 €

Note: I'm not looking to cause a security breach, but rather the opposite: understanding the attack and performing security tests for my devices.

2
  • You're probably thinking of a DMA attack - the classic vector is firewire. – Journeyman Geek May 10 '16 at 7:03
  • @JourneymanGeek: yes, except that my device doesn't have Firewire. – Thomas Weller May 10 '16 at 7:07

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.