Analyzing & Breaking QNX Exploit Mitigations and PRNGs For Embedded Systems

This presentation concerns a dissection of QNX: a proprietary, real-time operating system aimed at the embedded market. QNX is used in many sensitive and critical devices in different industry verticals and dominates the automotive sphere. While some prior security research has discussed QNX, mainly as a byproduct of BlackBerry mobile research, there is no prior work on QNX exploit mitigations or its secure random number generators.