Index: native_client_sdk/src/doc/_developer.chrome.com_generated/community/security-contest/index.html |
diff --git a/native_client_sdk/src/doc/_developer.chrome.com_generated/community/security-contest/index.html b/native_client_sdk/src/doc/_developer.chrome.com_generated/community/security-contest/index.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..e4f65c17f83d971f33f32ea6828d526a13c01dce |
--- /dev/null |
+++ b/native_client_sdk/src/doc/_developer.chrome.com_generated/community/security-contest/index.html |
@@ -0,0 +1,202 @@ |
+{{+bindTo:partials.standard_nacl_article}} |
+ |
+<section id="security-contest-archive"> |
+<span id="contest-archive"></span><h1 id="security-contest-archive"><span id="contest-archive"></span>Security Contest Archive</h1> |
+<div class="contents local topic" id="contents"> |
+<ul class="small-gap"> |
+<li><a class="reference internal" href="#contest-overview" id="id2">Contest overview</a></li> |
+<li><a class="reference internal" href="#contest-winners" id="id3">Contest winners</a></li> |
+<li><p class="first"><a class="reference internal" href="#panel-of-judges" id="id4">Panel of judges</a></p> |
+<ul class="small-gap"> |
+<li><a class="reference internal" href="#chair" id="id5">Chair</a></li> |
+<li><a class="reference internal" href="#judges" id="id6">Judges</a></li> |
+</ul> |
+</li> |
+<li><a class="reference internal" href="#additional-information" id="id7">Additional information</a></li> |
+</ul> |
+</div> |
+<p>The Native Client team at Google has gone to exceptional measures to |
+make Native Client a secure system, including holding a public |
+security contest. This page archives information from that contest, |
+including the list of contest winners and the lineup of security |
+experts who served as judges.</p> |
+<p>Although the security contest has ended, the Native Client team |
+welcomes your continued involvement in the project. You can help by |
+submitting bugs and participating in the Native Client discussion |
+group.</p> |
+<section id="contest-overview"> |
+<h2 id="contest-overview">Contest overview</h2> |
+<p>The Native Client team held a contest in 2009 to test the security of |
+Native Client and help make the system more secure. Participants were |
+invited to discover security bugs in Native Client technology in order |
+to compete for cash prizes.</p> |
+<p>Here was the challenge put forth by the Native Client team:</p> |
+<blockquote> |
+<div>Do you think it is impossible to safely run untrusted x86 code on |
+the web? Do you want a chance to impress a panel of some of the top |
+security experts in the world? Then submit an exploit to the Native |
+Client Security contest and you could also win cash prizes, not to |
+mention bragging rights.</div></blockquote> |
+<p>The contest judges evaluated exploits designed to defeat Native Client |
+security measures based on severity, scope, reliability, and |
+style. The winning teams and entries are listed below.</p> |
+</section><section id="contest-winners"> |
+<span id="id1"></span><h2 id="contest-winners"><span id="id1"></span>Contest winners</h2> |
+<p>The Native Client team thanks everyone who participated in the contest |
+for their contributions to improving the quality and security of the |
+Native Client system. The judges reviewed the submitted exploits and |
+identified the following teams as winners:</p> |
+<table border="1" class="docutils"> |
+<colgroup> |
+</colgroup> |
+<tbody valign="top"> |
+<tr class="row-odd"><td><img alt="First place medal" class="first last" src="/native-client/images/medal-64_1st.png" /> |
+</td> |
+<td><p class="first"><strong>Team</strong>: Beached As</p> |
+<p><strong>Members</strong>: Mark Dowd, Ben Hawkes</p> |
+<p><strong>Submitted issues</strong>: 50, 51, 52, 53, 55, 56, 57, 58, 59, 60, 62, 63</p> |
+<p class="last">Mark Dowd and Ben Hawkes are application security specialists |
+hailing from Australia and New Zealand, respectively. Mark |
+works for IBM ISS X-Force R&D, whereas Ben currently performs |
+independent research while simultaneously pursuing a |
+mathematics and computing science degree. Both have uncovered |
+major security flaws in ubiquitous Internet software, in terms |
+of both exploitable bugs and weaknesses in system protection |
+mechanisms. Both have spoken at numerous security conferences |
+in recent years, including BlackHat, Ruxcon, KiwiCon, and |
+Cansec West.</p> |
+</td> |
+</tr> |
+<tr class="row-even"><td><img alt="Second place medal" class="first last" src="/native-client/images/medal-64_2nd.png" /> |
+</td> |
+<td><p class="first"><strong>Team</strong>: CJETM</p> |
+<p><strong>Members</strong>: Jason Carpenter, Eric Monti, Chris Rohlf</p> |
+<p><strong>Submitted issues</strong>: 42, 44, 49, 70</p> |
+<p class="last">Team CJETM is comprised of security vulnerability researchers |
+Chris Rohlf, Jason Carpenter and Eric Monti. All three have |
+abused software professionally for a long time.</p> |
+</td> |
+</tr> |
+<tr class="row-odd"><td><img alt="Third place medal" class="first last" src="/native-client/images/medal-64_3rd.png" /> |
+</td> |
+<td><p class="first"><strong>Team</strong>: 0xdead</p> |
+<p><strong>Members</strong>: Gabriel Campana</p> |
+<p><strong>Submitted issues</strong>: 45</p> |
+<p class="last">Gabriel Campana is a security researcher working at Sogeti ESEC |
+R&D labs. His research interests are mainly focused on |
+vulnerability research, exploitation methods, and Linux kernel |
+security. Lately he has been working on automated vulnerability |
+research, especially fuzzing. In his spare time, he plays with |
+embedded network devices.</p> |
+</td> |
+</tr> |
+<tr class="row-even"><td><img alt="Fourth place medal" class="first" src="/native-client/images/medal-64_4th.png" /> |
+<p class="last">(tie)</p> |
+</td> |
+<td><p class="first"><strong>Team</strong>: teamfkmr</p> |
+<p><strong>Members</strong>: Daiki Fukumori</p> |
+<p><strong>Submitted issues</strong>: 66, 67</p> |
+<p class="last">Daiki Fukumori is a web security researcher. He has given talks |
+at POC Korea and AVTokyo on Web 2.0 Hacking, and he introduced |
+Native Client security at Shibuya.pm. He currently has an |
+interest in cloud security.</p> |
+</td> |
+</tr> |
+<tr class="row-odd"><td><img alt="Fourth place medal" class="first" src="/native-client/images/medal-64_4th.png" /> |
+<p class="last">(tie)</p> |
+</td> |
+<td><p class="first"><strong>Team</strong>: Alex Rad</p> |
+<p><strong>Members</strong>: Alex Radocea</p> |
+<p><strong>Submitted issues</strong>: 81</p> |
+<p class="last">Alex Radocea is a 20-year old student at Rensselaer Polytechnic |
+Institute. In the realm of computer security he is really |
+excited about proactively designed technology which can help |
+wipe out entire bug classes. Currently he is helping improve |
+Native Client through Google Summer of Code.</p> |
+</td> |
+</tr> |
+</tbody> |
+</table> |
+</section><section id="panel-of-judges"> |
+<span id="contest-judges"></span><h2 id="panel-of-judges"><span id="contest-judges"></span>Panel of judges</h2> |
+<p>Google recruited the following group of distinguished security experts |
+to serve as judges for the Native Client security contest:</p> |
+<section id="chair"> |
+<h3 id="chair">Chair</h3> |
+<table border="1" class="docutils"> |
+<colgroup> |
+</colgroup> |
+<tbody valign="top"> |
+<tr class="row-odd"><td>Edward Felten</td> |
+</tr> |
+<tr class="row-even"><td>Princeton University</td> |
+</tr> |
+<tr class="row-odd"><td><a class="reference external" href="http://www.cs.princeton.edu/~felten/">http://www.cs.princeton.edu/~felten/</a></td> |
+</tr> |
+</tbody> |
+</table> |
+</section><section id="judges"> |
+<h3 id="judges">Judges</h3> |
+<table border="1" class="docutils"> |
+<colgroup> |
+</colgroup> |
+<tbody valign="top"> |
+<tr class="row-odd"><td>Alex Halderman</td> |
+<td>Niels Provos</td> |
+<td>Bennet Yee</td> |
+</tr> |
+<tr class="row-even"><td>University of Michigan</td> |
+<td>Google</td> |
+<td>Google</td> |
+</tr> |
+<tr class="row-odd"><td><a class="reference external" href="http://www.cse.umich.edu/~jhalderm/">http://www.cse.umich.edu/~jhalderm/</a></td> |
+<td><a class="reference external" href="http://www.citi.umich.edu/u/provos/">http://www.citi.umich.edu/u/provos/</a></td> |
+<td><a class="reference external" href="http://www.bennetyee.org/">http://www.bennetyee.org/</a></td> |
+</tr> |
+<tr class="row-even"><td>Brad Karp</td> |
+<td>Stefan Savage</td> |
+<td>Nickolai Zeldovich</td> |
+</tr> |
+<tr class="row-odd"><td>University of College London</td> |
+<td>University of California San Diego</td> |
+<td>MIT</td> |
+</tr> |
+<tr class="row-even"><td><a class="reference external" href="http://www.cs.ucl.ac.uk/staff/B.Karp/">http://www.cs.ucl.ac.uk/staff/B.Karp/</a></td> |
+<td><a class="reference external" href="http://www.cs.ucsd.edu/~savage">http://www.cs.ucsd.edu/~savage</a></td> |
+<td><a class="reference external" href="http://people.csail.mit.edu/nickolai/">http://people.csail.mit.edu/nickolai/</a></td> |
+</tr> |
+<tr class="row-odd"><td>Greg Morrisett</td> |
+<td>Dan Wallach</td> |
+<td><div class="first last"> </div></td> |
+</tr> |
+<tr class="row-even"><td>Harvard University</td> |
+<td>Rice University</td> |
+<td><div class="first last"> </div></td> |
+</tr> |
+<tr class="row-odd"><td><a class="reference external" href="http://www.eecs.harvard.edu/~greg/">http://www.eecs.harvard.edu/~greg/</a></td> |
+<td><a class="reference external" href="http://www.cs.rice.edu/~dwallach/">http://www.cs.rice.edu/~dwallach/</a></td> |
+<td><div class="first last"> </div></td> |
+</tr> |
+</tbody> |
+</table> |
+</section></section><section id="additional-information"> |
+<h2 id="additional-information">Additional information</h2> |
+<p>For additional information about the Native Client security contest, |
+see the archived |
+<a class="reference internal" href="/native-client/community/security-contest/contest-announcement.html"><em>Contest Announcement</em></a>, |
+<a class="reference internal" href="/native-client/community/security-contest/contest-faq.html"><em>FAQ</em></a> and |
+<a class="reference internal" href="/native-client/community/security-contest/contest-terms.html"><em>Terms & Conditions</em></a>.</p> |
+<p>If you’d like to get involved with Native Client, you can:</p> |
+<ul class="small-gap"> |
+<li>Use the |
+<a class="reference external" href="https://developers.google.com/native-client/sdk">Native Client SDK</a> |
+to build Native Client web applications.</li> |
+<li>Submit <a class="reference external" href="http://code.google.com/p/nativeclient/issues/list">bugs</a> |
+and participate in the Native Client |
+<a class="reference external" href="http://groups.google.com/group/native-client-discuss">discussion group</a>.</li> |
+<li>Contribute to the |
+<a class="reference external" href="http://code.google.com/p/nativeclient/">Native Client open-source project</a>.</li> |
+</ul> |
+</section></section> |
+ |
+{{/partials.standard_nacl_article}} |