Indirect External Access
Explore indirect external access in Linux systems, covering implementation, benefits, and potential challenges for developers and system administrators.
The Case for Memory Segregation
Explore memory segregation in Linux systems, covering security assumptions, challenges, and solutions like isolation and compound pages. Learn about Project Underground and future directions.
Confidential Computing MC
Explore confidential computing advancements and their impact on Linux systems in this comprehensive session from the Linux Plumbers Conference.
eBPF & Networking
Explore cutting-edge eBPF technology and its impact on Linux networking in this comprehensive conference session, featuring expert discussions and insights.
Unmapped Private Memory for Confidential Guests
Explore advanced techniques for enhancing privacy and security in virtualized environments through unmapped private memory implementation for confidential guests.
Testing Intel TDX Functionality With New Set of Self Tests
Explore Intel TDX functionality through new self-tests, covering spec conformance, edge cases, and feature development strategies for efficient and thorough testing.
The Elephants in the Confidential Room - Attestation and Verification
Explore attestation and verification challenges in confidential computing, focusing on key issues and potential solutions for secure environments.
How Can We Make Procfs Safe?
Explore strategies to enhance procfs security in Linux, addressing vulnerabilities and implementing safeguards for improved system protection and stability.
Restricting Access to IPP Printers with OAuth2 Framework
Learn to secure IPP printers using OAuth2, enhancing print job authorization and access control in network environments. Explore implementation strategies and best practices for printer security.
Linux Kernel Control-Flow Integrity Support
Explore Linux kernel control-flow integrity with experts, discussing implementation challenges, performance impacts, and future directions for enhancing system security.
Designing UAPI for Fuzz-ability
Explore techniques for designing user-space APIs that are more amenable to fuzzing, enhancing system security and reliability through improved testing methodologies.
Remote Attestation of IoT Devices Using a Discrete TPM 2.0
Explore secure IoT device authentication using discrete TPM 2.0, covering attestation benefits, challenges, and practical implementation through a live demonstration.
Secure Boot Auto Enrollment
Explore Secure Boot auto enrollment with Vincent Dagonneau, covering implementation, challenges, and future developments in Linux system security.
Sandboxing - Containerizing Alternatives to Snap for Printer Applications or CUPS
Explore alternatives to Snap for sandboxing and containerizing Printer Applications and CUPS, discussing security, performance, and compatibility considerations for Linux systems.
Mitigating Speculative Execution Attacks with ASI - Follow Up
Explore advanced techniques for mitigating speculative execution attacks using ASI, presented by security experts Junaid Shahid and Ofir Weisse.
BPF Signing and IMA Integration
Explore BPF signing and its integration with Integrity Measurement Architecture (IMA) to enhance Linux kernel security and integrity verification.
TCP Memory Isolation on Multi-Tenant Servers
Explore TCP memory isolation techniques for multi-tenant servers, enhancing performance and security in shared computing environments.
The Revival of the Learning-Sync Bridgeport Flag
Explore merging network fabrics using Linux bridge, learning about motivation, implementation, and future developments in high-performance networking for IBM Z systems.
Closing the BPF Map Permission Loophole
Explore a security vulnerability in BPF map permissions and its impact on access control. Learn about proposed solutions to enhance the integrity of BPF map operations in Linux systems.
Securely Booting Confidential VMs with Encrypting Disk
Explore secure boot options for confidential VMs with encrypted disks, discussing challenges and solutions for various TEEs. Gather feedback to define a standardized, secure, and maintainable mechanism.
AST Meta-programming
Explore AST meta-programming in Swift for code injection and aspect-oriented programming. Learn practical examples and automation techniques with SauceKit.