Protected Execution Facility for Secure Virtual Machines
Explore IBM's Protected Execution Facility for enhanced security in Linux servers. Learn about secure virtual machines, architectural modifications, and protection against compromised components in cloud computing.
Safely Restricting File Access with Landlock - A Programmatic Approach
Explore Landlock's innovative approach to file access control, addressing limitations of existing LSMs and enabling safe, unprivileged security policy implementation for Linux systems.
Extending OpenPOWER Boot Security to Guests
Explore secure boot design for KVM and PowerVM guests on OpenPOWER, addressing unique challenges and leveraging open source solutions to enhance OS boot security.
Linux Integrity Subsystem Status Update
Overview of new features and changes in Linux integrity subsystem, discussing current and future developments. Presented by IBM researcher and subsystem maintainer Mimi Zohar.
Security Module Stacks: Flexibility and Pitfalls in System Security Configuration
Explore security module stacking pitfalls and solutions for Linux systems. Learn configuration strategies, conflict avoidance, and networking considerations from an experienced kernel developer.
A Canonical Event Log Structure for IMA - Optimizing Attestation Information
Explore a new Canonical Event Log structure for IMA, enhancing Linux system attestation with algorithm agility, sequence numbering, and optimized storage for improved security and efficiency.
Updating Linux with TUX: Trust Update for Linux Kernel
Explore TUX, a system for maintaining Linux kernel integrity during updates. Learn about secure boot, TPM, and remote attestation to enhance platform trust and mitigate security threats.
Software-Defined Infrastructure at Uber Scale
Explore Uber's software-defined infrastructure, focusing on global network engineering, automation, and performance optimization for massive-scale operations and peak efficiency.
The Road Towards a Linux TSN Infrastructure
Explore Time-Sensitive Networking standards, current Linux architecture, and challenges in implementing TSN for various domains like automotive and industrial control automation.
A Sockets API for LoRa - Standardizing IoT Network Interfaces
Explore a proposed Linux sockets API for LoRa, enabling standardized software interfaces for IoT modules. Learn about kernel integration, device drivers, and network protocols.
Grabbing Audio and Video on a Board Farm - Extending MuxPi for Multimedia Testing
Explore techniques for capturing audio and video on board farms, extending MuxPi capabilities, and integrating remote access solutions for multimedia driver development and testing.
Supporting Hardware Codecs in a Linux System - Lecture
Explore the challenges and solutions for implementing hardware codec support in Linux systems, focusing on v4l2 subsystem integration and compatibility with popular video players.
Cooking a Debian System - One, Two, Debos!
Learn to create customized Debian images quickly and reproducibly using debos. Explore its functionality, use cases, and streamlined process for building tailored systems for various applications.
Building Safe Systems with Linux
Explore Linux's suitability for complex safety-related systems, focusing on compliance with functional safety standards and methodologies developed in the SIL2LinuxMP project.
Spectre and Meltdown vs. Real-Time - Measuring Mitigation Costs
Explore the impact of Spectre and Meltdown mitigations on real-time systems. Quantify performance costs using benchmarks, focusing on latency and determinism in embedded environments and hypervisors.
Getting Your Patches in Mainline Linux - What Not to Do and What to Try Instead
Insights on effectively submitting Linux kernel patches from a contributor-turned-maintainer. Explores common pitfalls, successful strategies, and the trust-building process between submitters and maintainers.
Using External Persistent Volumes for High Availability on DC/OS
Explore strategies for reducing recovery times and achieving high availability in DC/OS using external persistent volumes, focusing on distributed applications like Cassandra and HDFS.
Unikernels and Explorations - Challenges and Opportunities
Explore unikernels' potential in cloud environments, their advantages over traditional VMs and containers, and challenges in gaining widespread adoption. Insights on optimizing unikernel platforms for performance and customization.
GPU, USB, NICs and Other Physical Devices in Containers
Explore device passthrough in containers: GPUs, USB, NICs, and more. Learn to consolidate machines, build CI platforms, and leverage LXD for VM-like environments using Linux containers.
Is Linux Kernel Development Suitable for Safety-Critical Systems? - Progress and Methods
Explore Linux kernel development for safety-critical systems, examining methods to assess and improve its suitability for use in autonomous driving and other high-stakes applications.
Protecting Your System from Security Threats - Linux Security Mechanisms
Comprehensive overview of Linux security mechanisms for embedded systems, covering encryption, secure boot, and integrity measures to protect against various attacks.