Linux Kernel Security Contributions by ANSSI
Explore ANSSI's contributions to Linux kernel security, including Landlock LSM and CLIP Linux. Learn about the benefits of open-source collaboration for government agencies and enterprises.
Overview and Recent Developments of Keyrings Subsystem
Explore the Linux keyrings subsystem, its access methods, recent updates, and future plans in this informative talk by Red Hat expert David Howells.
Security Module Stacks That Don't Fall Over
Explore security module stacking pitfalls, configuration conflicts, and best practices for new modules, with emphasis on networking challenges and infrastructure usage.
SELinux Overview and Recent Developments
Annual update on SELinux developments, covering past achievements, current work, and future plans. Insights from maintainer Paul Moore on kernel, userspace, and policy changes.
Overview and Recent Developments in Smack Linux Security Module
Explore Smack Linux Security Module's current state, recent developments, and practical applications in this comprehensive overview by Intel expert Casey Schaufler.
Using Linux as a Secure Boot Loader for OpenPOWER Servers
Explore enhancements to Linux's Integrity Management Architecture for secure boot loading on OpenPOWER servers, addressing limitations and providing flexible run-time decision-making capabilities.
Tying EVM into LSM Policy for Enhanced Linux Security
Explore securing developer machines using Linux's Extended Verification Module, integrating it with security mechanisms for enhanced application privilege management based on metadata integrity.
Overview and Recent Developments - Linux Integrity
Explore Linux integrity subsystem's goals, security guarantees, and developments with IBM expert Mimi Zohar. Learn about file alteration detection, measurement appraisal, and local integrity enforcement.
Using Istio to Manage Cross-Regional and Cross-Cluster Microservices
Explore multicluster Istio deployments for managing cross-regional microservices, including design techniques, challenges, and best practices for efficient service mesh implementation.
OpenSSL Hardware Offload Enhancement for TLS Acceleration
Exploring OpenSSL's asynchronous acceleration framework for enhanced TLS performance, including implementation in Nginx and VPP, and recent improvements for efficient kernel bypass communication.
Using Blockchain and Cryptography to Enable Privacy-preserving and Inclusive Financial Services
Explore blockchain and cryptography for privacy-preserving financial services. Learn about data renting, secure joint computation, and real-world applications in inclusive banking and targeted marketing.
Running Untrusted Code with gVisor - Container Security and Sandboxing
Explore gVisor, an open-source sandbox runtime for enhanced container security. Learn its architecture, use cases, and advantages over other approaches, with a demo of a minimal serverless platform using gVisor and Kubernetes.
Network Flow Monitoring in Kubernetes with Contiv/VPP CNI and Elastic Stack
Explore powerful network flow monitoring in Kubernetes using Contiv/VPP CNI and Elastic Stack for real-time visibility, debugging, bottleneck identification, and security incident investigation.
Manage Multi-tenant ML Workloads Using Istio
Explore Istio integration for multi-tenant ML pipelines on Kubernetes, focusing on workload isolation, access control, and API management. Learn from a Kubeflow case study and live demo.
Managing Kubernetes in Air Gap and Offline Environments
Strategies for installing, upgrading, and managing Kubernetes offline. Learn about using Kubespray and Harbor in bare metal environments for offline infrastructure management.
How SPIFFE Helps Istio in Service Mesh Federation
Explore SPIFFE's role in Istio service mesh federation, focusing on identity federation across trust domains and secure cross-mesh communication. Includes demonstration of Istio-SPIRE system setup.
MDS, Fallout, Zombieland, and Linux - Security Vulnerabilities in Modern Processors
Explore recent security vulnerabilities in processors and their impact on Linux, with insights on mitigation strategies and the importance of collaborative efforts in cybersecurity.
Upgrade Images by Digging Out and Automatically Fixing Vulnerabilities
Explore techniques for enhancing container image security through vulnerability scanning, policy controls, and automated fixes. Learn how to protect operating environments and ensure secure distribution channels.
OpenPOWER Host OS Secure Boot Key Management
Explore OpenPOWER's flexible key management for Linux-based secure boot, covering architecture, ownership, updates, storage, and compatibility across firmware, kernel, and userspace.
Tracing: The Bane of Security Folks - Understanding Kernel Tracing Techniques
Explore kernel tracing techniques, their security implications, and the tension between transparency and protection in Linux systems. Learn about live patching and function tracing methods.
Linux Encryption Performance Improvements and Best Practices
Explore recent Linux cryptographic stack improvements, covering TLS, dm-crypt, and hardware acceleration. Learn how enhanced encryption performance can bolster data protection across various architectures.