C++ Developer with Windows security experience
Budget: $40 – $70 USD
We are looking for a mechanism to create isolated shared memory in Windows 10 & 11 that can be securely accessed only by our processes (and not by other processes owned by the user).
Standard shared memory leaves a file handle that any process owned by the user can access. We have a (slower) secure communication channel that we can pass information over prior to escalation to the shared memory. It appears that the Authz system might play a part... we are experienced developers but have not worked with Windows SDDL and security previously.
Our threat model is to protect against other processes with the same non-elevated user privileges.
We have a sketch of an idea for how to achieve this at https://github.com/StirlingLabs/LibWinSafeShm (please contact for access).
Deliverables on this project would be;
1) a failing test showing that the contents of LibWinSafeShm are accessible to other processes run by the same user, and
2) enhancements to this repo to get the test to pass, with a simple C API to create and access the shared memory from external code
Standard shared memory leaves a file handle that any process owned by the user can access. We have a (slower) secure communication channel that we can pass information over prior to escalation to the shared memory. It appears that the Authz system might play a part... we are experienced developers but have not worked with Windows SDDL and security previously.
Our threat model is to protect against other processes with the same non-elevated user privileges.
We have a sketch of an idea for how to achieve this at https://github.com/StirlingLabs/LibWinSafeShm (please contact for access).
Deliverables on this project would be;
1) a failing test showing that the contents of LibWinSafeShm are accessible to other processes run by the same user, and
2) enhancements to this repo to get the test to pass, with a simple C API to create and access the shared memory from external code