| Index: native_client_sdk/src/doc/_developer.chrome.com_generated/community/security-contest/index.html
 | 
| diff --git a/native_client_sdk/src/doc/_developer.chrome.com_generated/community/security-contest/index.html b/native_client_sdk/src/doc/_developer.chrome.com_generated/community/security-contest/index.html
 | 
| new file mode 100644
 | 
| index 0000000000000000000000000000000000000000..e4f65c17f83d971f33f32ea6828d526a13c01dce
 | 
| --- /dev/null
 | 
| +++ b/native_client_sdk/src/doc/_developer.chrome.com_generated/community/security-contest/index.html
 | 
| @@ -0,0 +1,202 @@
 | 
| +{{+bindTo:partials.standard_nacl_article}}
 | 
| +
 | 
| +<section id="security-contest-archive">
 | 
| +<span id="contest-archive"></span><h1 id="security-contest-archive"><span id="contest-archive"></span>Security Contest Archive</h1>
 | 
| +<div class="contents local topic" id="contents">
 | 
| +<ul class="small-gap">
 | 
| +<li><a class="reference internal" href="#contest-overview" id="id2">Contest overview</a></li>
 | 
| +<li><a class="reference internal" href="#contest-winners" id="id3">Contest winners</a></li>
 | 
| +<li><p class="first"><a class="reference internal" href="#panel-of-judges" id="id4">Panel of judges</a></p>
 | 
| +<ul class="small-gap">
 | 
| +<li><a class="reference internal" href="#chair" id="id5">Chair</a></li>
 | 
| +<li><a class="reference internal" href="#judges" id="id6">Judges</a></li>
 | 
| +</ul>
 | 
| +</li>
 | 
| +<li><a class="reference internal" href="#additional-information" id="id7">Additional information</a></li>
 | 
| +</ul>
 | 
| +</div>
 | 
| +<p>The Native Client team at Google has gone to exceptional measures to
 | 
| +make Native Client a secure system, including holding a public
 | 
| +security contest. This page archives information from that contest,
 | 
| +including the list of contest winners and the lineup of security
 | 
| +experts who served as judges.</p>
 | 
| +<p>Although the security contest has ended, the Native Client team
 | 
| +welcomes your continued involvement in the project. You can help by
 | 
| +submitting bugs and participating in the Native Client discussion
 | 
| +group.</p>
 | 
| +<section id="contest-overview">
 | 
| +<h2 id="contest-overview">Contest overview</h2>
 | 
| +<p>The Native Client team held a contest in 2009 to test the security of
 | 
| +Native Client and help make the system more secure. Participants were
 | 
| +invited to discover security bugs in Native Client technology in order
 | 
| +to compete for cash prizes.</p>
 | 
| +<p>Here was the challenge put forth by the Native Client team:</p>
 | 
| +<blockquote>
 | 
| +<div>Do you think it is impossible to safely run untrusted x86 code on
 | 
| +the web? Do you want a chance to impress a panel of some of the top
 | 
| +security experts in the world? Then submit an exploit to the Native
 | 
| +Client Security contest and you could also win cash prizes, not to
 | 
| +mention bragging rights.</div></blockquote>
 | 
| +<p>The contest judges evaluated exploits designed to defeat Native Client
 | 
| +security measures based on severity, scope, reliability, and
 | 
| +style. The winning teams and entries are listed below.</p>
 | 
| +</section><section id="contest-winners">
 | 
| +<span id="id1"></span><h2 id="contest-winners"><span id="id1"></span>Contest winners</h2>
 | 
| +<p>The Native Client team thanks everyone who participated in the contest
 | 
| +for their contributions to improving the quality and security of the
 | 
| +Native Client system. The judges reviewed the submitted exploits and
 | 
| +identified the following teams as winners:</p>
 | 
| +<table border="1" class="docutils">
 | 
| +<colgroup>
 | 
| +</colgroup>
 | 
| +<tbody valign="top">
 | 
| +<tr class="row-odd"><td><img alt="First place medal" class="first last" src="/native-client/images/medal-64_1st.png" />
 | 
| +</td>
 | 
| +<td><p class="first"><strong>Team</strong>: Beached As</p>
 | 
| +<p><strong>Members</strong>: Mark Dowd, Ben Hawkes</p>
 | 
| +<p><strong>Submitted issues</strong>: 50, 51, 52, 53, 55, 56, 57, 58, 59, 60, 62, 63</p>
 | 
| +<p class="last">Mark Dowd and Ben Hawkes are application security specialists
 | 
| +hailing from Australia and New Zealand, respectively. Mark
 | 
| +works for IBM ISS X-Force R&D, whereas Ben currently performs
 | 
| +independent research while simultaneously pursuing a
 | 
| +mathematics and computing science degree. Both have uncovered
 | 
| +major security flaws in ubiquitous Internet software, in terms
 | 
| +of both exploitable bugs and weaknesses in system protection
 | 
| +mechanisms. Both have spoken at numerous security conferences
 | 
| +in recent years, including BlackHat, Ruxcon, KiwiCon, and
 | 
| +Cansec West.</p>
 | 
| +</td>
 | 
| +</tr>
 | 
| +<tr class="row-even"><td><img alt="Second place medal" class="first last" src="/native-client/images/medal-64_2nd.png" />
 | 
| +</td>
 | 
| +<td><p class="first"><strong>Team</strong>: CJETM</p>
 | 
| +<p><strong>Members</strong>: Jason Carpenter, Eric Monti, Chris Rohlf</p>
 | 
| +<p><strong>Submitted issues</strong>: 42, 44, 49, 70</p>
 | 
| +<p class="last">Team CJETM is comprised of security vulnerability researchers
 | 
| +Chris Rohlf, Jason Carpenter and Eric Monti. All three have
 | 
| +abused software professionally for a long time.</p>
 | 
| +</td>
 | 
| +</tr>
 | 
| +<tr class="row-odd"><td><img alt="Third place medal" class="first last" src="/native-client/images/medal-64_3rd.png" />
 | 
| +</td>
 | 
| +<td><p class="first"><strong>Team</strong>: 0xdead</p>
 | 
| +<p><strong>Members</strong>: Gabriel Campana</p>
 | 
| +<p><strong>Submitted issues</strong>: 45</p>
 | 
| +<p class="last">Gabriel Campana is a security researcher working at Sogeti ESEC
 | 
| +R&D labs. His research interests are mainly focused on
 | 
| +vulnerability research, exploitation methods, and Linux kernel
 | 
| +security. Lately he has been working on automated vulnerability
 | 
| +research, especially fuzzing. In his spare time, he plays with
 | 
| +embedded network devices.</p>
 | 
| +</td>
 | 
| +</tr>
 | 
| +<tr class="row-even"><td><img alt="Fourth place medal" class="first" src="/native-client/images/medal-64_4th.png" />
 | 
| +<p class="last">(tie)</p>
 | 
| +</td>
 | 
| +<td><p class="first"><strong>Team</strong>: teamfkmr</p>
 | 
| +<p><strong>Members</strong>: Daiki Fukumori</p>
 | 
| +<p><strong>Submitted issues</strong>: 66, 67</p>
 | 
| +<p class="last">Daiki Fukumori is a web security researcher. He has given talks
 | 
| +at POC Korea and AVTokyo on Web 2.0 Hacking, and he introduced
 | 
| +Native Client security at Shibuya.pm. He currently has an
 | 
| +interest in cloud security.</p>
 | 
| +</td>
 | 
| +</tr>
 | 
| +<tr class="row-odd"><td><img alt="Fourth place medal" class="first" src="/native-client/images/medal-64_4th.png" />
 | 
| +<p class="last">(tie)</p>
 | 
| +</td>
 | 
| +<td><p class="first"><strong>Team</strong>: Alex Rad</p>
 | 
| +<p><strong>Members</strong>: Alex Radocea</p>
 | 
| +<p><strong>Submitted issues</strong>: 81</p>
 | 
| +<p class="last">Alex Radocea is a 20-year old student at Rensselaer Polytechnic
 | 
| +Institute. In the realm of computer security he is really
 | 
| +excited about proactively designed technology which can help
 | 
| +wipe out entire bug classes. Currently he is helping improve
 | 
| +Native Client through Google Summer of Code.</p>
 | 
| +</td>
 | 
| +</tr>
 | 
| +</tbody>
 | 
| +</table>
 | 
| +</section><section id="panel-of-judges">
 | 
| +<span id="contest-judges"></span><h2 id="panel-of-judges"><span id="contest-judges"></span>Panel of judges</h2>
 | 
| +<p>Google recruited the following group of distinguished security experts
 | 
| +to serve as judges for the Native Client security contest:</p>
 | 
| +<section id="chair">
 | 
| +<h3 id="chair">Chair</h3>
 | 
| +<table border="1" class="docutils">
 | 
| +<colgroup>
 | 
| +</colgroup>
 | 
| +<tbody valign="top">
 | 
| +<tr class="row-odd"><td>Edward Felten</td>
 | 
| +</tr>
 | 
| +<tr class="row-even"><td>Princeton University</td>
 | 
| +</tr>
 | 
| +<tr class="row-odd"><td><a class="reference external" href="http://www.cs.princeton.edu/~felten/">http://www.cs.princeton.edu/~felten/</a></td>
 | 
| +</tr>
 | 
| +</tbody>
 | 
| +</table>
 | 
| +</section><section id="judges">
 | 
| +<h3 id="judges">Judges</h3>
 | 
| +<table border="1" class="docutils">
 | 
| +<colgroup>
 | 
| +</colgroup>
 | 
| +<tbody valign="top">
 | 
| +<tr class="row-odd"><td>Alex Halderman</td>
 | 
| +<td>Niels Provos</td>
 | 
| +<td>Bennet Yee</td>
 | 
| +</tr>
 | 
| +<tr class="row-even"><td>University of Michigan</td>
 | 
| +<td>Google</td>
 | 
| +<td>Google</td>
 | 
| +</tr>
 | 
| +<tr class="row-odd"><td><a class="reference external" href="http://www.cse.umich.edu/~jhalderm/">http://www.cse.umich.edu/~jhalderm/</a></td>
 | 
| +<td><a class="reference external" href="http://www.citi.umich.edu/u/provos/">http://www.citi.umich.edu/u/provos/</a></td>
 | 
| +<td><a class="reference external" href="http://www.bennetyee.org/">http://www.bennetyee.org/</a></td>
 | 
| +</tr>
 | 
| +<tr class="row-even"><td>Brad Karp</td>
 | 
| +<td>Stefan Savage</td>
 | 
| +<td>Nickolai Zeldovich</td>
 | 
| +</tr>
 | 
| +<tr class="row-odd"><td>University of College London</td>
 | 
| +<td>University of California San Diego</td>
 | 
| +<td>MIT</td>
 | 
| +</tr>
 | 
| +<tr class="row-even"><td><a class="reference external" href="http://www.cs.ucl.ac.uk/staff/B.Karp/">http://www.cs.ucl.ac.uk/staff/B.Karp/</a></td>
 | 
| +<td><a class="reference external" href="http://www.cs.ucsd.edu/~savage">http://www.cs.ucsd.edu/~savage</a></td>
 | 
| +<td><a class="reference external" href="http://people.csail.mit.edu/nickolai/">http://people.csail.mit.edu/nickolai/</a></td>
 | 
| +</tr>
 | 
| +<tr class="row-odd"><td>Greg Morrisett</td>
 | 
| +<td>Dan Wallach</td>
 | 
| +<td><div class="first last"> </div></td>
 | 
| +</tr>
 | 
| +<tr class="row-even"><td>Harvard University</td>
 | 
| +<td>Rice University</td>
 | 
| +<td><div class="first last"> </div></td>
 | 
| +</tr>
 | 
| +<tr class="row-odd"><td><a class="reference external" href="http://www.eecs.harvard.edu/~greg/">http://www.eecs.harvard.edu/~greg/</a></td>
 | 
| +<td><a class="reference external" href="http://www.cs.rice.edu/~dwallach/">http://www.cs.rice.edu/~dwallach/</a></td>
 | 
| +<td><div class="first last"> </div></td>
 | 
| +</tr>
 | 
| +</tbody>
 | 
| +</table>
 | 
| +</section></section><section id="additional-information">
 | 
| +<h2 id="additional-information">Additional information</h2>
 | 
| +<p>For additional information about the Native Client security contest,
 | 
| +see the archived
 | 
| +<a class="reference internal" href="/native-client/community/security-contest/contest-announcement.html"><em>Contest Announcement</em></a>,
 | 
| +<a class="reference internal" href="/native-client/community/security-contest/contest-faq.html"><em>FAQ</em></a> and
 | 
| +<a class="reference internal" href="/native-client/community/security-contest/contest-terms.html"><em>Terms & Conditions</em></a>.</p>
 | 
| +<p>If you’d like to get involved with Native Client, you can:</p>
 | 
| +<ul class="small-gap">
 | 
| +<li>Use the
 | 
| +<a class="reference external" href="https://developers.google.com/native-client/sdk">Native Client SDK</a>
 | 
| +to build Native Client web applications.</li>
 | 
| +<li>Submit <a class="reference external" href="http://code.google.com/p/nativeclient/issues/list">bugs</a>
 | 
| +and participate in the Native Client
 | 
| +<a class="reference external" href="http://groups.google.com/group/native-client-discuss">discussion group</a>.</li>
 | 
| +<li>Contribute to the
 | 
| +<a class="reference external" href="http://code.google.com/p/nativeclient/">Native Client open-source project</a>.</li>
 | 
| +</ul>
 | 
| +</section></section>
 | 
| +
 | 
| +{{/partials.standard_nacl_article}}
 | 
| 
 |