Security in Zephyr and Fuchsia - Comparing Emerging Open Source Operating Systems
Explore security architectures and mechanisms in Zephyr and Fuchsia operating systems, comparing them to Linux. Learn about ongoing advancements and unique approaches to IoT and microkernel-based security.
Protected Execution Facility for Secure Virtual Machines
Explore IBM's Protected Execution Facility for enhanced security in Linux servers. Learn about secure virtual machines, architectural modifications, and protection against compromised components in cloud computing.
Safely Restricting File Access with Landlock - A Programmatic Approach
Explore Landlock's innovative approach to file access control, addressing limitations of existing LSMs and enabling safe, unprivileged security policy implementation for Linux systems.
Linux Integrity Subsystem Status Update
Overview of new features and changes in Linux integrity subsystem, discussing current and future developments. Presented by IBM researcher and subsystem maintainer Mimi Zohar.
Syzbot and the Tale of Thousand Kernel Bugs
Explore Linux kernel bug detection tools and their impact on system security. Learn about syzbot, syzkaller, and sanitizers for improving kernel stability and reliability.
Updating Linux with TUX: Trust Update for Linux Kernel
Explore TUX, a system for maintaining Linux kernel integrity during updates. Learn about secure boot, TPM, and remote attestation to enhance platform trust and mitigate security threats.
Spectre and Meltdown vs. Real-Time - Measuring Mitigation Costs
Explore the impact of Spectre and Meltdown mitigations on real-time systems. Quantify performance costs using benchmarks, focusing on latency and determinism in embedded environments and hypervisors.
Adapting Kubernetes for Machine Learning Workflows
Explore how Bloomberg adapted Kubernetes for machine learning, addressing multi-tenancy, data security, and hardware acceleration in their AI-driven financial services platform.
Blockchain and the Future of Networking
Explore blockchain's impact on networking, from creating a global data infrastructure to revolutionizing network operations. Learn about innovative projects and future possibilities in this emerging field.
Bootstrapping Secure Mesos Clusters
Learn to secure Apache Mesos clusters with authentication, authorization, encryption, and hardening techniques. Explore security zones, TLS, namespaces, and secrets management for robust cluster protection.
Mesos Security Exposed - Recent Advancements and Features
Explore advanced security features in Apache Mesos, including API authentication, executor authentication, secrets management, cryptography support, and enhanced isolation techniques.
Protecting Your System from Security Threats - Linux Security Mechanisms
Comprehensive overview of Linux security mechanisms for embedded systems, covering encryption, secure boot, and integrity measures to protect against various attacks.
Replace Your Exploit-Ridden Firmware with Linux
Learn how to replace vulnerable UEFI firmware with NERF, an open-source system using a tiny Linux kernel and initramfs, enhancing security and reducing exploit risks in PC and laptop firmware.
Identifying and Supporting X-Compatible Hardware Blocks in SoCs
Explore techniques for identifying and integrating undocumented hardware blocks in SoCs, focusing on Allwinner SoCs and Linux kernel support. Learn to spot compatible components and adapt existing drivers.
Application Code of Conduct - Full-Stack Policy as Code
Explore full-stack policy as code implementation using open-source tools like Rego and Open Policy Agent. Learn to build comprehensive authorization solutions across backend, frontend, and business functions.
Take the Power Back on Your Containers with Flatcar
Learn to deploy and manage Flatcar, a secure container-focused OS, using Terraform and Ignition. Explore auto-updates with Nebraska for efficient, low-maintenance infrastructure.
Homomorphic Encryption in the Open Source World
Explore homomorphic encryption's potential to revolutionize data privacy and security in open source environments, enabling secure data analysis and multi-party sharing without compromising confidentiality.
From Builds and CI to Security Testing in a Single PR
Streamline app development by integrating security testing into CI/CD pipelines. Learn to automate builds, vulnerability scans, and deployments within a single pull request using open-source tools.
Automating Governance - From Commit to Production with Modern DevOps Practices
Discover modern governance strategies to automate software supply chain processes, ensuring security, compliance, and audit requirements while achieving no-human-hands deployment from commit to production.
No More Turtles: The SecondaryVM Framework - An Alternative to Nested Virtualization
Explore an innovative alternative to nested virtualization: the SecondaryVM framework. Learn about its implementation, challenges, and potential applications in confidential computing and diverse platforms.
How ARM Systems are Booted - An Introduction to the ARM Boot Flow
Explore ARM system boot processes, from reset vector to Linux startup, covering ARM Trusted Firmware, CPU power management, and system services like PSCI and SCMI.