Write Protection mechanism: the MMU The MMU works at page level
5
Hypervisor-enforced memory protection
6
Side effects of the protection
7
Example of conversion of a function
8
Missing functionality
9
Performance limitation Example: lists
10
Does it work?
Description:
Explore kernel hardening techniques and protection mechanisms in this 38-minute conference talk by Igor Stoppa from Huawei. Delve into new features for securing dynamically and statically allocated memory, and learn how to integrate them into popular data structures like lists and hlists. Discover practical examples of protecting critical data such as IMA measurements lists and extending existing data structures to reduce attack surfaces. Gain insights into merging upstream, write protection mechanisms using MMU, hypervisor-enforced memory protection, and performance considerations. Benefit from Stoppa's extensive experience in kernel hardening, system integration, and embedded development across companies like Huawei, Intel, and Nokia.
Kernel Hardening - Protecting the Protection Mechanisms