Buffer Overflow Attacks
|
|
- Belinda Preston
- 6 years ago
- Views:
Transcription
1 CS- Spring 18 Bur Ovrlow Attacks Computr Systms ,
2 CS- Spring 18 Hacking Roots in phon phraking Whit Hat vs Gray Hat vs Black Hat Ovr % o Modrn Sotwar Dvlopmnt is Black Hat! Tip th balanc: B a orc or good not vil!
3 CS- Spring 18 Disclaimr Bur Ovrlow Attack DO NOT ABUSE! Modrn cod is protctd rom this attack svral ways Ancint orm o hacking First documntd in 19 Usd in 1988 Morris Worm First intrnt virus Usd to hack Unix, Windows, Xbox, PS, Wii Taught hr as an xampl o what to watch out or!
4 CS- Spring 18 Exampl Vulnrabl Cod bool gtstring() { char bur[81]; bur[]='\'; gts(bur); i (strln(bur)>) { print("rad lin: %s\n",bur); rturn tru; } rturn als; } gts rads rom stdin until it inds ithr an nd-o-il or a nwlin (which is rplacd by a null trminator). gts copis whatvr it rads into th argumnt (bur). gts dos not chck to mak sur rsult its in spac allocatd.
5 CS- Spring 18 x8 xpansion bool gtstring() { } char bur[81]; bur[]='\'; gts(bur); i (strln(bur)>) { } print("rad lin: %s\n",bur); rturn tru; rturn als; mov jmp push %rbp mov %rsp,%rbp sub $x,%rsp movb $x,-x(%rbp) la -x(%rbp),%rax mov %rax,%rdi callq 44c <gts@plt> $x1,%ax 44 <gtstring+x4> mov $x,%ax lavq rtq la -x(%rbp),%rax movzbl (%rax),%ax tst %al,%al j 449 <gtstring+x4> la -x(%rbp),%rax mov %rax,%rsi mov $x41,%di mov $x,%ax callq 449 <print@plt>
6 CS- Spring 18 stack atr call to gtstring main s stack ram rturn addrss whil( (gs=gtstring())) {}; 833: b8 mov $x,%ax 838: 8 1c callq 89 <gtstring> 83d: 88 4 mov %al,-x1(%rbp) 84: 8 d cmpb $x,-x1(%rbp) 844: d jn 833 <main+x3> %rbp %rsp Addrss Valu (4 bit) FFF FFFF E89 FFF FFFF E98 FFF FFFF E E FFF FFFF E88 FFF FFFF E988 FFF FFFF E88 483D FFF FFFF E8 FFF FFFF E88 FFF FFFF E88 FFF FFFF E8 FFF FFFF E818 FFF FDD 4 FFF FFFF E81 FFF FFFF E88 FFF FAA EDB FFF FFFF E8.
7 CS- Spring 18 stack in gtstring atr prambl bool gtstring() { %rbp 89: push %rbp 8a: mov %rsp,%rbp 8d: c sub $x,%rsp char bur[81]; bur[]='\'; main s %rbp 81: c 4 a movb $x,-x(%rbp) gtstring s stack ram main s stack ram rturn addrss bur %rsp Addrss Valu (4 bit) FFF FFFF E89 FFF FFFF E98 FFF FFFF E E FFF FFFF E88 FFF FFFF E988 FFF FFFF E88 483D FFF FFFF E8 FFF FFFF E8A FFF FFFF E88 FFF FFFF E88 FFF FFFF E8 FFF FFFF E818 FFF FDD 4 FFF FFFF E81 FFF FFFF E88 FFF FAA EDB FFF FFFF E8.
8 CS- Spring 18 Stack lt to right (littl ndian) a 8 3 d c 81 8A 8 88 main s stack ram gtstring s stack ram bur rturn@ main s %rbp Addrsss x 8a x 483d This is Valus
9 CS- Spring 18 Bur Ovrlow Put a vry long string into an input il Much longr than th lngth o bur So long that it writs ovr what is past bur in gtstring s ram What is past bur? So long that it writs ovr th lowst addrss in main s ram! What is in th lowst addrss in main s ram?
10 CS- Spring 18 String in il (stdin) rad by gts T h i s i s a c h a r a c t r s t r i n g t h a t g o s o n o r a v r y l o n g d i s t a n c s o t h a t i t o v r l o w s i t s b u r m a i n A B C D E s r b p r t a d d r main s bp Rturn Addrss! bur Alignmnt Padding
11 CS- Spring 18 Stack lt to right (littl ndian) d c 88 8d main s stack ram gtstring s stack ram bur rturn@ main s %rbp Addrsss This is a charactr string that gos on or a vry long distanc so that it ovrlows its bur Valus x 3 9 1d x4 41 4
12 CS- Spring 18 stack in gtstring atr gts gts(bur); %rbp 8: 48 8d 4 a la -x(%rbp),%rax 89: c mov %rax,%rdi 8c: 8 3 callq b <gts@plt> i (strln(bur)>) { main s %rbp 81: 48 8d 4 a la -x(%rbp),%rax gtstring s stack ram main s stack ram rturn addrss bur %rsp Addrss Valu (4 bit) FFF FFFF E89 FFF FFFF E98 FFF FFFF E E FFF FFFF E88 FFF FFFF E988 FFF FFFF E FFF FFFF E d FFF FFFF E88 FFF FFFF E FFF FFFF E FFF FFFF E FFF FFFF E FFF FFFF E88 FFF FAA EDB FFF FFFF E8.
13 CS- Spring 18 stack in gtstring at rturn rturn addrss rturn tru; %rsp 894: b8 1 mov $x1,%ax 899: b jmp 8a <gtstring+x4> 8a: c9 lavq 8a1: c3 rtq %rip (valu is x ) Sgmntation Fault Addrss Valu (4 bit) FFF FFFF E89 FFF FFFF E98 FFF FFFF E E FFF FFFF E88 FFF FFFF E988 FFF FFFF E FFF FFFF E d FFF FFFF E88 FFF FFFF E FFF FFFF E FFF FFFF E FFF FFFF E FFF FFFF E88 FFF FAA EDB FFF FFFF E8.
14 CS- Spring 18 Mixing Hx and ASCII Normally trat a il as a string o ASCII charactrs In act, ach ASCII charactr has a hx rprsntation T h i s i s a c h a r a c W can writ a program to put non-ascii hx data in a il S xmp_mix Us th command od Ax t x1z to show both ASCII and hx >This is a charac< d ad b a >tr string...< 1
15 CS- Spring 18 Exampl o a il with ASCII and Hx ASCII Rprsntation on trminal cat il This is a charactr stringþ¾ï Mixd rprsntation od Ax -t x1z il >This is a charac< d ad b a >tr string...< 1
16 CS- Spring 18 GEDIT Mixd Fil
17 CS- Spring 18 String in il (stdin) rad by gts T h i s i s a c h a r a c t r s t r i n g t h a t g o s o n o r a v r y l o n g d i s t a n c s o t h a t i t o v r l o w s i t s b u r A B C D E b a d d a 4 8 b a d d main s bp Rturn Addrss! bur Alignmnt Padding
18 CS- Spring 18 Stack lt to right (littl ndian) b a d d b a d d a c 88 8d main s stack ram gtstring s stack ram bur rturn@ main s %rbp Addrsss This is a charactr string that gos on or a vry long distanc so that it ovrlows its bur Valus xdad b dad b x 48a
19 CS- Spring 18 stack in gtstring atr gts gts(bur); %rbp 8: 48 8d 4 a la -x(%rbp),%rax 89: c mov %rax,%rdi 8c: 8 3 callq b <gts@plt> i (strln(bur)>) { main s %rbp 81: 48 8d 4 a la -x(%rbp),%rax gtstring s stack ram main s stack ram rturn addrss bur %rsp Addrss Valu (4 bit) FFF FFFF E89 FFF FFFF E98 FFF FFFF E E FFF FFFF E88 FFF FFFF E988 FFF FFFF E88 48a FFF FFFF E8 dad b dad b FFF FFFF E88 FFF FFFF E FFF FFFF E FFF FFFF E FFF FFFF E FFF FFFF E88 FFF FAA EDB FFF FFFF E8.
20 CS- Spring 18 stack in gtstring atr gts mov $x1,%ax jmp 44 <gtstring+x4> lavq rtq main s stack ram rturn addrss bur %rbp gtstring s stack ram %rsp Addrss Valu (4 bit) FFF FFFF E9 FFF FFFF E9F FFF FFFF E8F8 FFF FA B4 FFF FFFF E8F FFF FFFF E9F FFF FFFF E8E8 FE D4C 3BA 198 FFF FFFF E8E FFF FFFF E8D8 FFF FFFF E898 4 D9 FFF FFFF E FFF FFFF E FFF FFFF E FFF FFFF E FFF FFFF E8 1.
21 CS- Spring 18 What could b at rturn addrss? Your vil cod!
22 CS- Spring 18 Problms with Bur Ovrlow Attack Nd to know ost rom bur to top o stack / Nd to mix ASCII with hxadcimal in input il String can t contain nwlin (xa) Nd to know addrss o pirat routin to rturn to Hard to rturn to convntional low atr attack ovrwrittn %rbp has bn ovrwrittn lost top o callr s stack ram Gt that rom objdump d Can writ a program to do that Basic rstriction Challng or projct 4 Can gt original rturn@ rom objdump d, or just don t rturn %rsp points to bottom o callr s ram, and w can ind its siz rom objdump d, or just don t us
23 CS- Spring 18 Addrss Spac Layout Randomization ASLR is a atur introducd to prvnt things lik bur ovrlow attacks Randomizs whr your cod is loadd Evry tim you xcut, your unction is loadd at a dirnt addrss Hnc objdump no longr prints complt addrss just last thr digits ASLR will prvnt rturn to a dirnt unction in th sam cod unction instructions ar at a dirnt plac ach run gdb turns o ASLR cod is always loadd at x xxxx To turn o ASLR on LDAP: >starch linux4 R <command>
24 CS- Spring 18 Prvnting Bur Ovrlow w/ Guard bool gtstring() { struct bustr { char bur[81]; int guard; } bu = { { x } { xfedcba98 }} ; gts(bu.bur); i (strln(bur)>) { assrt(bu.guard==xfedcba98); print("rad lin: %s\n",bu.bur); rturn tru; } rturn als; } guard gos in stack ram atr (on top o) bur I bur ovrlow occurs, guard will b modiid I bur ovrlow occurs, assrt will ail Unlss hackr did objdump and put th guard valu in his hackd il
25 CS- Spring 18 gcc stack guarding I you compil with th stack-protctor lag, gcc will automatically provid stack guards or you I gcc inds a corruptd stack guard, it prints *** stack smashing dtctd ***:./targt trminatd Sgmntation ault gcc stack protction is OFF by dault on LDAP machins
26 CS- Spring 18 Prvnting Bur Ovrlow w/ gts bool gtstring() { char bur[81]; bur[]='\'; gts(bur,sizo(bur),stdin); i (strln(bur)>) { print("rad lin: %s\n",bur); rturn tru; } rturn als; } gts rads rom any stram (third paramtr) gts rads until EITHER nwlin (x1), OR scond paramtr rachd. gts prvnts bur ovrwrit
27 CS- Spring 18 Prvnting w/ Mmory Protction Your ntir addrss spac is dividd into 49 byt pags 49= 1 ; It taks 1 bits, or 3 hx digits to count rom to 49 4 bit addrsss irst bits (13 hx charactrs) ar pag numbr 4 bit addrsss last 1 bits (3 hx charactrs) ar ost within pag Each pag in mmory has thr indpndnt scurity attributs: Can I rad mmory in this pag Can I writ mmory in this pag Can I xcut instructions in this pag I you try to prorm an action on a pag which is not allowd, you will gt a sgmntation violation
28 CS- Spring 18 Dault Mmory Protction Whn you cod is loadd into mmory, it is loadd in pags that allow rad and xcut, but not writ Pags in th stack allow rad or writ, but not xcution Pags on th hap (malloc d spac) allow rad or writ, but not xcution Thr ar library routins to modiy mmory protction or a pag, but by dault, thr is no mmory you ar allowd to both writ to, and xcut rom. I your vil cod is not alrady loadd, it s hard to xcut it! Projct 4 has spcial cod to avoid this problm!
SDK White Paper. Filter Blit
DK Whit Papr Filtr Blit WP-397--v July Abstract Filtr Blit Exampl This xampl dmonstrats how to implmnt custom imag procssing with iltrs using pixl shadrs to procss th imag. This tchniqu can b usd or a
More informationOwner's Manual. Pocket Light Meter. Model 82017
Ownr's Manual Pockt Light Mtr Modl 82017 CAUTION: Rad, undrstand and follow Safty Ruls and Oprating Instructions in this manual bfor using this product. Safty Opration Maintnanc Español Sars Brands Managmnt
More informationCOMPLIANCE RETURN FORM BROADCASTING SIGNAL DISTRIBUTION SERVICES
CA/F/MMS/COMP-01 COMPLIANCE RETURN FORM BROADCASTING SIGNAL DISTRIBUTION SERVICES PURSUANT TO THE PROVISIONS OF THE KCA 1998, KC (A) A, 2009, KIC (A) A, 2013, AND THE LICENSE CONDITIONS 1. GENERAL INFORMATION
More informationThe Casino Experience. Let us entertain you
Th Casio Expric Lt us trtai you Th Casio Expric If you r lookig for a grat ight out, a Casio Expric is just for you. 10 Th Straight Flush Expric 15 pr prso This is a grat itroductio to gaig that savs you
More informationCET335 Microprocessor Interfacing Lab 4: Digital Output
CET335 Miroprossor Intrfaing La 4: Digital Output Introdution: As with digital inputs, digital outputs ar also asy to intrfa to and ontrol from softwar. This la dmonstrats hardwar and softwar rquirmnts
More informationWithout taxes Other Taxes VAT BG EL EE LT MT LV CZ HR UK PL RO FI SI ES HU FR CY SK SE EU- Without Taxes Other taxes VAT
Elctricity prics for housholds and industry on 1 st July 2005 Elctricity prics hav incrasd in narly all EU Mmbr Stats btwn July 2004 and July 2005 Statistics in focus ENVIRONMENT AND ENERGY This publication
More informationCircle the correct one according to the text above. (2 x 6 = 12)
Unit 5 - Quiz 1 Nam & Surnam :... Stunt ID Numr :... Shool :... Class :... Dat :... Rsult :... REDING Complt th txt with th prompts low. (3 x 6 = 18) 1 tr a w TV programs, 2 Now, yazıt Öztürk is a mil
More informationAPPLICATION NOTE VACUUM FLUORESCENT DISPLAY MODULE
AN-E-3237A APPLICATION NOTE VACUUM FLUORESCENT DISPLAY MODULE GRAPIC DISPLAY MODULE GP92A1A GENERAL DESCRIPTION FUTABA GP92A1A is a graphic display module using a FUTABA 128 64 VFD. Consisting of a VFD,
More informationNabors Bell Ringers School Year
s g n i R l l B Nabos -6 School Ya 7 t s u g Au Tach s Nam Subjct Piod Dat Dictions: Wit th paagaph. CIRCLE th NOUNS. UNDERLINE th VERBS. Put a BOX aound th ADJECTIVES. I watch as Gal pulls out his knif
More informationUse with VIP2K Monitor Program Version 1.4 (vip2k14.hex) at U2, and the matching state machine file (vip-2716.hex) at U7 on the VIP2K CPU board.
VIP2K Video Display Memory Map - by Chuck Yakym 1/3/2019 Use with VIP2K Monitor Program Version 1.4 (vip2k14.hex) at U2, and the matching state machine file (vip-2716.hex) at U7 on the VIP2K CPU board.
More informationFast Quadrature Decode TPU Function (FQD)
PROGRAMMING NOTE Order this document by TPUPN02/D Fast Quadrature Decode TPU Function (FQD) by Jeff Wright 1 Functional Overview The fast quadrature decode function is a TPU input function that uses two
More informationNHD WG AFTI VZ# C5
NHD 240128WG AFTI VZ# C5 Graphic Liquid Crystal Display Module NHD Newhaven Display 240128 240 x 128 Pixels WG Display Type: Graphic A Model F White CCFL Backlight T FSTN ( ) I Transmissive, 6:00 Optimal
More informationSTOCK EXCHANGE RELEASE
(8) Rcasti of quartrly full yar 2 first, scond third quartr 2 rsults ion Stock xcha rlas at 5: (CET +) Espoo, Finl - today providd historical rsults for its businsss, rcastd for comparability purposs accordi
More informationCome and join us at WebLyceum
Come and join us at WebLyceum For Past Papers, Quiz, Assignments, GDBs, Video Lectures etc Go to http://www.weblyceum.com and click Register In Case of any Problem Contact Administrators Rana Muhammad
More informationPress PVC pressure pipes for drinking water supply SIRCI GRESINTEX DALMINE RESINE
52 14 Prss- 52 RESSU RE P 14 Prss- PVC PVC prssur pips for drinking watr supply SIRCI GRESINTEX DALMINE RESINE PVC prssur pips for cold watr supply Th rigid PVC prssur pips PRESS 1452 ar producd according
More informationShelby Township. August 13 & 14, 2016 on the Shelby Township Municipal Grounds Van Dyke Avenue, Shelby Township, MI 48316
33 rd Annual Shlby Township Art, Fin Crafts and Music on th Shlby Township Municipal Grounds August 13 & 14, 2016 on th Shlby Township Municipal Grounds 52700 Van Dyk Avnu, Shlby Township, MI 48316 Jurid
More informationEP A2 (19) (11) EP A2 (12) EUROPEAN PATENT APPLICATION. (43) Date of publication: Bulletin 2011/39
(19) (12) EUROPEAN PATENT APPLICATION (11) EP 2 368 716 A2 (43) Date of publication: 28.09.2011 Bulletin 2011/39 (51) Int Cl.: B41J 3/407 (2006.01) G06F 17/21 (2006.01) (21) Application number: 11157523.9
More informationOcean Sensor Systems, Inc. Wave Staff, OSSI F, Water Level Sensor With 0-5V, RS232 & Alarm Outputs, 1 to 20 Meter Staff
Ocean Sensor Systems, Inc. Wave Staff, OSSI-010-002F, Water Level Sensor With 0-5V, RS232 & Alarm Outputs, 1 to 20 Meter Staff General Description The OSSI-010-002E Wave Staff is a water level sensor that
More informationWord Mastery Decoding Fluency Practice Cards
Word Mastery Fluency Cards Word Mastery Decoding Fluency Practice Cards Copyright 2014 by Donald L. Potter www.wordmastery.org Note from Internet Publisher: Donald L. Potter July 4, 2014 I designed these
More informationHD66840/HD LVIC/LVIC-II (LCD Video Interface Controller) Description. Features
HD6684/HD6684 LVIC/LVIC-II (LCD Video Interface Controller) Description The HD6684/HD6684 LCD video interface controller (LVIC/LVIC-II) converts standard RGB video signals for CRT display into LCD data.
More information"JESSE STONE: LOST IN PARADISE"
[ISAN 0000-0004-1D7F-0000-H-0000-0000-N] Prepared By: Roles: RAIG PTTIGRW / SONY PITURS TLVISION MUSI - SUSAN SLAMR / MARLA LUDWIG - omposer - Publisher AM - Administrator S - Sub Publisher SR - SubArranger
More informationDUOLABS Spa. Conditional Access Module Hardware Brief. CA Module User Guide V0.2
Conditional Access Module Hardware Brief CA Module User Guide V0.2 Index Conditional Access Module... 1 CA Module User Guide... 1 Revision history... Errore. Il segnalibro non è definito. Index... 1 Reference...
More information21 years of getting children reading. 21 million free books given to schools.
BIG TOP book FAIR FREE BOOKS for our school whn you buy a book! Roll up for a rading xtravaganza! books from ONLY 9789999427081 Com to our Book Fair! 21 yars of gtting childrn rading. 21 million fr books
More informationTutorial Introduction
Tutorial Introduction PURPOSE - To explain how to configure and use the Timebase Module OBJECTIVES: - Describe the uses and features of the Timebase Module. - Identify the steps to configure the Timebase
More informationTHE APPLICATION OF SIGMA DELTA D/A CONVERTER IN THE SIMPLE TESTING DUAL CHANNEL DDS GENERATOR
THE APPLICATION OF SIGMA DELTA D/A CONVERTER IN THE SIMPLE TESTING DUAL CHANNEL DDS GENERATOR J. Fischer Faculty o Electrical Engineering Czech Technical University, Prague, Czech Republic Abstract: This
More informationDistributed by: www.jameco.com --3-4242 The content and copyrights of the attached material are the property of its owner. E2O2-27-X3 Semiconductor MSM2C55A-2RS/GS/VJS This version: Jan. 99 Previous version:
More informationIntroduction to the restoration of motion picture film
Introduction to th rstoration of motion pictur film Th twntith cntury is th cntury of th moving imag. Sinc cinma was invntd in th last yars of th nintnth cntury, it has dvlopd as on of th most important
More informationAmazing Grace! How Sweet the Sound
Amazing Grac! How Swt th Sound NEW BRITAIN Dsignd for childrn in grads 1-6, contnts includ: Taching Stps Hymn Scor Author and Composr Information Hymn Activitis Prcussion Accompanimnt Hymn Introduction
More information82C55A CHMOS PROGRAMMABLE PERIPHERAL INTERFACE
Y Y Y Y Y 82C55A CHMOS PROGRAMMABLE PERIPHERAL INTERFACE Compatible with all Intel and Most Other Microprocessors High Speed Zero Wait State Operation with 8 MHz 8086 88 and 80186 188 24 Programmable I
More information8 X 8 KEYBOARD INTERFACE (WITHOUT INTERRUPT SIGNAL)
UNIT 4 REFERENCE 1 8 X 8 KEYBOARD INTERFACE (WITHOUT INTERRUPT SIGNAL) Statement: Interface an 8 x 8 matrix keyboard to 8085 through 8279 in 2-key lockout mode and write an assembly language program to
More informationHMC-C064 HIGH SPEED LOGIC. 50 Gbps, XOR / XNOR Module. Features. Typical Applications. General Description. Functional Diagram
HMC-C4 Features Typical Applications The HMC-C4 is ideal for: OC-78 and SDH STM-25 Equipment Serial Data Transmission up to 5 Gbps Digital Logic Systems up to 5 Gbps Broadband Test and Measurement Functional
More informationChapter 8. Digital and Analog Interfacing Methods
Chapter 8 Digital and Analg Interfacing Methds Lessn 3 Alphanumeric and Dt-Matrix Display Devices Alphanumeric Display Devices Sixteen Segments display Micrcntrllers-... 2nd Ed. Raj Kamal Pearsn Educatin
More informationDRT SERIES DUAL RATE / TOTALIZER INSTALLATION & OPERATING INSTRUCTIONS
MODL: DRT DRT SRIS DUAL RAT / TOTALIZR INSTALLATION & OPRATING INSTRUCTIONS http://www.kep.com KSSLR-LLIS PRODUCTS 10 Industrial Way ast atontown, NJ 07724 800-631-2165 732-935-1320 Fax 732-935-9344 99675
More informationCC-Series 7-Segment Configuration
CC-Series 7-Segment Configuration The power supply for the CC-Series 7-Segment LED Display is rated for 120VAC, which is to be delivered via the stranded black (hot) and white (neutral) wires on the supply.
More informationSlough Station. Dedworth. Clewer, Clewer Village. Eton. Eton. Datchet. Windsor. Slough Town Centre. Windsor & Eton Riverside.
Rout Map D rth h w wo or rth Ti r n Lan rs k Tin Tink L ayy u Rulswa Ro oa a Tstwoo R. Holly Dworth Crscnt Tsco s Fost Wolf f LanLan Av v. r Cl l w wr Fostr Av vnu nu Aston Ma hs Smith ith Hill ill l Ro
More informationSWINGIN WITH THE GERSHWINS! They Can t Take That Away from Me Nice Work If You Can Get It S Wonderful Let s Call the Whole Thing Off They All Laughed
K K PREVIEW 2 PIANO SWINGIN WITH THE GERSHWINS! They Can t Take That Away rom Me Nice Work I You Can Get It S Wonderul Let s Call the Whole Thing O They All Laughed Arranged by MAC HUFF REVIEW PREVIE PART
More information11401 and Digitizing Oscilloscopes TEK. Advanced Test Equipment Rentals ATEC (2832)
Establishd 1981 Advancd Tst Equipmnt Rntals www.atcorp.com 800-404-ATEC (2832) TEK Usr's Rfrnc Manual Part No. 070-5791-01 Product Group 47 11401 and 11402 Digitizing Oscilloscops Usr's Rfrnc Manual PLEASE
More informationLED Display Product Data Sheet LTS-2306CKD-P Spec No.: DS Effective Date: 07/20/2013 LITE-ON DCC RELEASE
LED Display Product Data Sheet LTS-2306CKD-P Spec No.: DS30-2013-0036 Effective Date: 07/20/2013 Revision: - LITE-ON DCC RELEASE BNS-OD-FC001/A4 LITE-ON Technology Corp. / Optoelectronics No.90,Chien 1
More information5. DMX CHANNEL SELECTION (DMX PROTOCOL)
Power Spot. DMX CHANNEL SELECTION (DMX PROTOCOL) Power Spot DMX Channel Selection ) PANcoarse 0.. 0 min. 2,6 s 0..2 00..FF 0..00 2) PAN-fine High- Pos... High- Pos + 2, (6 Bit) 0..2 00..FF 0..00 ) Tiltcoarse
More informationSecure Communication between Set-top Box and Smart Card in DTV Broadcasting
882 IEEE Tranation on Conumr Eltroni Vol. 50 No. 3 AUGUST 2004 Sur Communiation btwn St-top Box and Smart Card in DTV Broadating Tianpu Jiang Yongmin Hou and Shibao Zhng Abtrat In digital tlviion (DTV)
More informationLab 3 LCD Mar
Lab 3 LCD Mar. 2016 1 Objective 1. To be familiar with advanced output devices that can be connected to microcontroller. 2. To be able to work with many input/output devices together. Alphanumeric LCD
More informationeasily move to success from presentation LT10. lightweight projector.
aily mov from prntation to ucc LT10. lightwight projctor. A an on-th-road travlr you nd to tool around at a fat pac. Your rquirmnt ar impl. You look for intuitiv product that ar compact, ay to mov about
More informationCSN08101 Digital Forensics Lecture 7: Disk Analysis and File System. Module Leader: Dr Gordon Russell Lecturers: Robert Ludwiniak
CSN08101 Digital Forensics Lecture 7: Disk Analysis and File System Module Leader: Dr Gordon Russell Lecturers: Robert Ludwiniak Objectives Investigative Process Analysis Framework File Systems FAT NTFS
More informationElectronic Publishing
Electronic Publishing Size Does Matter ECEN 1200 Telecommunications 1 Electronic Newspaper Suppose it is desired to publish this newspaper electronically. What are important design considerations and questions
More informationDraft Environmental Impact Statement. Cricket Valley Energy Project Dover, NY. Section 5 Figures
Draft Environmntal Impact Statmnt Crickt Vally Enrgy Projct Dovr, NY Sction 5 Figurs Ra c ok k Dry Broo Bro TIVOLI o n Ri vr REDHOOK Huds 199 MILLERTON RHINEBECK 22 9 TSP 44 MILLBROOK 44 DOVER Tnmil Rivr
More informationPROGRAMMING CODE SHEET
Tiger 320 Series ROGRAMMING COD SHT Contents Initial Setup rocedures.............................2 Tiger 320 Series Code Logic Diagram.................4 CALIBRATION MOD..............................5 COD
More informationStarting Point. Volume 1. Reproducible music for 2 or 3 octaves handbells or handchimes. by Sandra Eithun. Contents
Rproducibl Starting Point Volum Rproducibl music for 2 or octavs handblls or handchims by Sandra Eithun Contnts Lvl - Rvri - Eithun...6 Quitud - Eithun...8 Lvl Trumpt Voluntary - Clark / arr. Eithun...0
More informationCombo Board.
Combo Board www.matrixtsl.com EB083 Contents About This Document 2 General Information 3 Board Layout 4 Testing This Product 5 Circuit Diagram 6 Liquid Crystal Display 7 Sensors 9 Circuit Diagram 10 About
More informationMusic Theory. Solfege Scales and The Piano
Music Theory Solfege Scales and The Piano The Musical Alphabet - Musicians use letters to represent Notes. - Notes range from A to G - Notes higher than G start again at A ex: A B C D E F G A B C. What
More informationBulletin 509 Full Voltage
Bulletin 509 Full Voltage Example Cat. No. 509 B O D A2E 17 a b c d e f a Bulletin No. Bulletin No. 509 Top-wired starter 509DC Top-wired starter (DC voltage) b NEMA Size T 00 A 0 B 1 C 2 D 3 E 4 F 5 G
More informationFAST MOTION BLUR COMPENSATION IN HEVC USING FIXED-LENGTH FILTER. Yiqun Liu and Jörn Ostermann
FAST MOTION BLUR COMPENSATION IN HEVC USING FIXED-LENGTH FILTER Yiqun Liu an Jörn Ostrmann Institut für Informationsvrarbitung, Libniz Univrsität Hannovr Applstr. 9A, 3067 Hannovr, Grmany ABSTRACT Motion
More informationOcean Sensor Systems, Inc. Wave Staff III, OSSI With 0-5V & RS232 Output and A Self Grounding Coaxial Staff
Ocean Sensor Systems, Inc. Wave Staff III, OSSI-010-008 With 0-5V & RS232 Output and A Self Grounding Coaxial Staff General Description The OSSI-010-008 Wave Staff III is a water level sensor that combines
More informationChapter 18. DRAM Circuitry Discussion. Block Diagram Description. DRAM Circuitry 113
DRAM Circuitry 113 Chapter 18 DRAM Circuitry 18-1. Discussion In this chapter we describe and build the actual DRAM circuits in our SK68K computer. Since we have already discussed the general principles
More informationContactors and Contactor Assemblies
Terminal designations according to EN 50 012 3RT10 1 contactors Ident. no. 10E 01 Sizes S0 to S12 Terminal designations according to EN 50 012 3RT10 2 to 3RT10 7, 3RT12, 3RT14 contactors 3RT10 1 contactors
More informationThe ASI demonstration uses the Altera ASI MegaCore function and the Cyclone video demonstration board.
April 2006, version 2.0 Application Note Introduction A digital video broadcast asynchronous serial interace (DVB-) is a serial data transmission protocol that transports MPEG-2 packets over copper-based
More informationOperating temperatures from 20 C ( 4 F) up to 50 C (122 F). Up to 70 C (158 F) with current derating and optional control module fan kit.
PowerFlex 525 PowerFlex 525 AC drives feature an innovative, modular design offering fast and easy installation and configuration. These costeffective compact drives come with embedded EtherNet/IP communications,
More informationDesigning Filters with the AD6620 Greensboro, NC
Designing Filters with the AD66 Greensboro, NC Abstract: This paper introduces the basics o designing digital ilters or the AD66. This article assumes a basic knowledge o ilters and their construction
More informationTEPZZ A_T EP A1 (19) (11) EP A1. (12) EUROPEAN PATENT APPLICATION published in accordance with Art.
(19) TEPZZ 8946 9A_T (11) EP 2 894 629 A1 (12) EUROPEAN PATENT APPLICATION published in accordance with Art. 13(4) EPC (43) Date of publication: 1.07.1 Bulletin 1/29 (21) Application number: 12889136.3
More informationPalo Alto s Premier Office Tower
SHORT TERM LEASE OPPORTUNITY CUENT AVAILABILITY Suit #A-20 #605 annon Dr Ham t Expwy ilton Wil low Chr Bay fron ity Univrs ysl rd r 84 ro > a arc Emb > EV charging station Ho or oni t CA Licns No 01094755
More informationNHD CF-CSXV#-F
NHD-2.4-240320CF-CSXV#-F TFT (Thin-Film Transistor) Liquid Crystal Display Module NHD- Newhaven Display 2.4-2.4 Diagonal 240320-240 x 320 Pixels (Portrait Mode) CF- Model C- Built-in Controller S- High
More informationARM7 Microcontroller Based Digital PRBS Generator
I J C International Journal of lectrical, lectronics ISSN No. (Online) : 2277-2626 and Computer ngineering 1(2): 55-59(2012) Special dition for Best Papers of Michael Faraday IT India Summit-2012, MFIIS-12
More informationAustralia Digital Tone Generator Supervision Tones
CHAPTER 2 Australia Plan This chapter details the modifications to the Digital Generator (DTG or DTG-2) and Call Progress Analyzer (CPA) cards, and SPC-CPA service circuits to support the supervision tones
More informationNXDN. NXDN Technical Specifications. Part 2: Conformance Test. Sub-part B: Common Air Interface Test. NXDN TS 2-B Version 1.2.
NXDN NXDN Technical Specifications Part 2: Conformance Test Sub-part B: Common Air Interface Test NXDN TS 2-B Version 1.2 November 2012 NXDN Forum Contents 1. Introduction...1 2. References...1 3. Abbreviations...2
More informationA sentence is a group of words that tells a whole idea. Example: The cat sat on the mat.
A sentence is a group of words that tells a whole idea. Example: The cat sat on the mat. Standard: L.1.1.j 1 Circle the sentences. 1. The jam 2. Sam ran up and down. 3. tag 4. We can tap. 5. I am sad.
More informationPhone Web
APRIL 8, 2015 Page 1 of 15 Introduction This document is intended for users who wish to provide their own user interface or control system for an SDP-25 system. The below controls are intended to be used
More informationEE 109 Homework 6 State Machine Design Name: Score:
EE 9 Homework 6 State Machine esign Name: Score: ue: See Blackboard Blackboard ONLY Submission. While the Blackboard submission may not require you to go through all the design steps (such as drawing out
More informationCollecting Is a Passion by Bart Collins, MMF Administrator/Development Director with Mark Elrod (January 29, 2004)
Th Moravian Music Foundation prsrvs, shars, and clbrats VOL. XIX th musical cultur of th Moravians. NO. 1 Collcting Is a Passion by Bart Collins, MMF Administrator/Dvlopmnt Dirctor with Mark Elrod (January
More informationLibrary Processing Services
Library Processing Services 2015 2016 We are proud to offer our customers the following services: catalog card kits, mylar jackets, theft detection, and the latest in barcoding technology. All information
More informationSTATUS AND FUTURE STRATEGY FOR ADVANCED HIGH POWER MICROWAVE SOURCES FOR ACCELERATORS
STATUS AND FUTURE STRATEGY FOR ADVANCED HIGH POWER MICROWAVE SOURCES FOR ACCELERATORS Abstract Enrgy fficint convrsion of lctrical grid powr into radio frquncy powr is bcoming on of th ky aspcts of futur
More informationFor children s voices And/or piano/classroom percussion KERRY ANDREW
NO PLACE LIKE For children s voices And/or piano/classroom percussion KERRY ANDREW NO PLACE LIKE For children s voices and/or piano/classroom percussion Written or the BBC s Ten Pieces Scheme, and premiered
More informationAD12-16U(PCI)EV. Features. High-Speed Analog Input Board for PCI AD12-16U(PCI)EV 1. Ver.1.01
High-Speed Analog Input Board for PCI AD2-6U(PCI)EV * s, color and design of the products are subject to change without notice. This product is PCI-compliant interface boards that convert analog input
More informationOWNER S MANUAL EXTERNAL CONTROL DEVICE SETUP
OWNER S MANUAL EXTERNAL CONTROL DEVICE SETUP Please read this manual carefully before operating the set and retain it for future reference. Available series EM9600 LM7600 G2 LM6200 LM3400 LS5600/5650 LM9600
More informationAD16-16U(PCI)EV. Features. High-Speed & Resolution Analog Input Board for PCI AD16-16U(PCI)EV 1. Ver.1.02
High-Speed & Resolution Analog Input Board for PCI * Specifications, color and design of the products are subject to change without notice. This product is PCI-compliant interface boards that convert analog
More informationAPPENDIX A ASSEMBLY CODE FOR THE SYSTEM (SELF-TEST CODE PLUS APPLICATION PROGRAM)
APPENDIX A ASSEMBLY CODE FOR THE SYSTEM (SELF-TEST CODE PLUS APPLICATION PROGRAM) asmcode3.asm Assembled with CASM 01/30/1999 20:41 PAGE 1 1 ; This program contains the self-test of whole chip i.e. ROM,
More informationKeysight Technologies N5998A HDMI Protocol/Audio/Video Analyzer and Generator
Keysight Technologies N5998A HDMI Protocol/Audio/Video Analyzer and Generator Data Sheet Version 1.2 Features and Beneits HDMI 1.4 compliance measurements HDMI protocol analysis HDMI data generator Deep
More informationDTMF Dialer Analog Output Data Sheet
13. DTMF Dialer Analog Output DTMF Dialer Analog Output Data Sheet Copyright 2003-2009 Cypress Semiconductor Corporation. All Rights Reserved. DTMFDialer PSoC Blocks API Memory (Bytes) Pins (per Resources
More informationCOLOR COMPUTER GRAPHICS
COLOR COMPUTER GRAPHICS by William Barden, Jr. Radio Shack A Division of Tandy Corp. Ft. Worth, Texas 761 02 Color Computer Graphics: 1982 Tandy Corporation, Fort Worth, Texas 76102 U.S.A. All Rights Reserved.
More informationLCD Module Specification
LCD Module Specification Model: LG192642-SMDWH6V Table of Contents COVER & CONTENTS 1 BASIC SPECIFICATIONS 2 ABSOLUTE MAXIMUM RATINGS 3 ELECTRICAL CHARACTERISTICS 4 OPERATING PRINCIPLES & METHODES 7 DISPLAY
More informationPart 2 -- A digital thermometer or talk I2C to your atmel microcontroller
Home Electronics Graphics, Film & Animation E-cards Other Linux stuff Photos Online-Shop Content: The new things The LCD display A little GUI How it works: Analog to digital conversion How it works: I2C
More informationLCD display module. graphic 61x16 dots
MT 6116B LCD display module graphic 61x16 dots General description МТ-6116B LCD display module is composed of LSI controller and LCD panel. The display module appearance is shown in Fig. 1. КB145VG4 controller
More informationECE 3610 MICROPROCESSING SYSTEMS: A SPEECH RECORDER AND PLAYER. Using the Polling I/O Method
ECE 3610 MICROPROCESSING SYSTEMS: A SPEECH RECORDER AND PLAYER Using the Polling I/O Method 1 PROBLEM SPECIFICATION Design a microprocessing system to record and playback speech. Use a RED and GREEN LED
More informationCSc 466/566. Computer Security. 4 : Cryptography Introduction
1/51 CSc 466/566 Computer Security 4 : Cryptography Introduction Version: 2012/02/06 16:06:05 Department of Computer Science University of Arizona collberg@gmail.com Copyright c 2012 Christian Collberg
More informationMT8814AP. ISO-CMOS 8 x 12 Analog Switch Array. Features. -40 to 85 C. Description. Applications
MT884 8 x 2 Analog Switch Array Features Internal control latches and address decoder Short set-up and hold times Wide operating voltage: 4.5 to 3.2 2pp analog signal capability R ON 65Ω max. @ DD =2,
More informationWORKING WORKING MS PACMAN MS PACMAN. Abbreviation Example: 2A p1 short to p2. Chip 2A pin 1 is shorted to pin 2. Low means grounded.
WORKING MS PACMAN WORKING MS PACMAN Abbreviation Example: 2A p1 short to p2 Chip 2A pin 1 is shorted to pin 2. Low means grounded. High means +5V M(red, pink, cyan, gold) are the monster colors from top
More informationLinux-based Mobile Phone Middleware. Application Programming Interface. Circuit-Switched Communication Service. Document: CELF_MPP_CS_D_FR4
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 Linux-based Mobile Phone Middleware Application Programming Interface Circuit-Switched Communication Service Document: CELF_MPP_CS_D_FR4 WARNING:
More informationModbus Register Tables for SITRANS RD300 & WI100
AG021414 Modbus Register Tables for SITRANS RD300 & WI100 WARNING: As is typical with most instruments, the addition of serial communications carries an inherent risk; it allows a remote operator to change
More informationTeacher s AIDE Training System. EZ Teach Silver Installation
Teacher s AIDE Training System EZ Teach Silver Installation A front row seat for every Student in your class! Page 1 of 17 TRODUCTION...3 EZ TEACH SILVER STALLATION 5 EASY STEPS...3 EZ Teach Components...3
More informationDrumchapel City Centre
rumchapl City Cntr rving: Annislan Gartnavl Hospital H Grat Wstrn oa Klvinbrig Bus tims from 20 August 2017 Wlcom aboar! hanks for choosing to travl with us. W oprat aroun 100 srvics across Gratr Glasgow
More informationFast Quadrature Decode TPU Function (FQD)
SEMICONDUCTOR PROGRAMMING NOTE Order this document by TPUPN02/D Fast Quadrature Decode TPU Function (FQD) by Jeff Wright 1 Functional Overview The fast quadrature decode function is a TPU input function
More informationLecture 6: Simple and Complex Programmable Logic Devices. EE 3610 Digital Systems
EE 3610: Digital Systems 1 Lecture 6: Simple and Complex Programmable Logic Devices MEMORY 2 Volatile: need electrical power Nonvolatile: magnetic disk, retains its stored information after the removal
More informationLinux based 3G Specification. Multimedia Mobile Phone API. Circuit Switched Communication Service. Document: CELF_MPP_CS_FR2b_
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 Linux based 3G Specification Multimedia Mobile Phone API Circuit Switched Communication Service Document: CELF_MPP_CS_FR2b_20060611
More informationStarting Point. Volume 1. Reproducible music for 3, 4 or 5 octaves handbells or handchimes. by Sandra Eithun. Contents
Rproducibl Starting Point Volum Rproducibl music for, or 5 octavs handblls or handchims by Sandra Eithun Contnts Lvl - Rvri - Eithun...6 Quitud - Eithun...8 Lvl Trumpt Voluntary - Clark / arr. Eithun...0
More informationLP4ER series Light Curtains Type 4
LPER sris warranty faturs warranty according IEC 6196-1 and IEC 6196-2 Robust housing (x60 mm) for applications in prsnc of havy shocks and vibrations 0 mm rsolution for hand protction and 2,, bams for
More informationChapter 4. Predicate logic allows us to represent the internal properties of the statement. Example:
4.1 Singular and General Propositions Chapter 4 Predicate logic allows us to represent the internal properties of the statement. Apples are red A Firetrucks are red F The previous symbols give us no indication
More informationTV Character Generator
TV Character Generator TV CHARACTER GENERATOR There are many ways to show the results of a microcontroller process in a visual manner, ranging from very simple and cheap, such as lighting an LED, to much
More informationPatrons Stephen Fry and Sir Antony Gormley. s p a c e t o c r e a t e. spring 2018 BOOK ON-LINE. Visit for more information
Patrons Stephen Fry and Sir Anny Gormley s p a c e t o c r e a t e spring 2018 0170 755 800 River Road, Westacre, King' s Lynn PE32 1UD BOOK ON-LINE Visit for more information estacre theatre space create
More informationSimple PICTIC Commands
The Simple PICTIC Are you an amateur bit by the Time-Nut bug but can t afford a commercial time interval counter with sub nanosecond resolution and a GPIB interface? Did you find a universal counter on
More informationBEGINNING STRING ORCHESTRA. g-force 5! Preview Only INSTRUMENTATION
EGNNNG STRNG ORCHESTRA Grade Level: 2 g-orce 5! ralh ord (asca) NSTRUMENTATON 1 Conductor 8 1st Violin 8 2nd Violin 5 3rd Violin (Viola T.C.) 5 Viola 5 5 String ass 1 Accomaniment 1 Percussion (Low Tom
More informationLED Display Product Data Sheet LTD-4830CKR-P Spec No.: DS Effective Date: 06/12/2013 LITE-ON DCC RELEASE
LED Display Product Data Sheet LTD-4830CKR-P Spec No.: DS30-2013-0042 Effective Date: 06/12/2013 Revision: - LITE-ON DCC RELEASE BNS-OD-FC001/A4 LITE-ON Technology Corp. / Optoelectronics No.90,Chien 1
More informationLong Tones Chromatic Scale-Ascending 5 minutes
Experiment Make Discoveries Play each note ith a ull, rich tone. Breath as oten as necessary. q =60 m b æ n Long Tones Chromatic Scale-Ascending 5 minutes b n æ b # # # E e E # r ) 6 Ab key æ # # E æ Ee
More information