Pp. 135–152 of the Proceedings

Next: Abstract

Security Analysis of the Palm Operating System
and its Weaknesses Against Malicious Code Threats

Kingpin and Mudge

@stake, Inc.
196 Broadway
Cambridge, MA 02139

{kingpin,mudge}@atstake.com

• Abstract
• Introduction
• Summary of Malicious Code Types
• Palm OS Device Architecture
  • Operating System
  • Hardware
• Retrieval of Passwords
  • Password Decoding Details
    • Passwords of 4 Characters or Less
    • Passwords Greater Than 4 Characters
  • Recommendations
• Backdoor Debug Modes
  • Recommendations
• Infection Techniques
  • Application Installation Procedure
    • Recommendations
  • Desktop Conduits
    • Recommendations
  • Creator ID Replacement
    • Recommendations
  • Wireless Communications
    • Infrared
    • RF
    • Recommendations
• Storage and Payload Hiding
  • Preferences and Databases
  • Flash Memory
• Execution Triggers
  • Launch Codes
    • Application Transfer
    • Recommendations
  • Trap Patching
    • Recommendations
• Malicious Actions
  • Application Deletion
    • Recommendations
  • Register Manipulation
    • Recommendations
  • Memory Corruption
    • Recommendations
• Conclusions
• Acknowledgments
• Bibliography
• About this document ...