Supervisor Protection Keys
Explore Supervisor Protection Keys with Ira Weiny, focusing on enhancing system security and memory protection in Linux environments.
SELinux-Based Mandatory Access Control in Cockpit Systems
Learn to implement SELinux-based Mandatory Access Control in Cockpit, covering architecture, requirements, approaches, and policy guidelines for enhanced security in container-based systems.
What is Lacking in Linux Security and What Should We Do About It - Panel Discussion
Experts discuss current Linux security challenges and potential solutions, exploring vulnerabilities, best practices, and future improvements for enhanced system protection.
10 Years of Linux Security - A Report Card
Comprehensive analysis of Linux security advancements and challenges over the past decade, highlighting key developments and future directions in open-source protection.
SELint - An SELinux Policy Static Analysis Tool
Explore SELint, a static analysis tool for SELinux policies, addressing challenges and improving security through practical examples and insights.
Linux Security Challenges and Solutions - Panel Discussion
Experts discuss current Linux security challenges and potential solutions, offering insights on improving system protection and addressing vulnerabilities in open-source environments.
Syscall Supervision in User Namespaces and Unprivileged Containers
Explore user namespaces, unprivileged containers, and syscall interception in Linux. Learn about seccomp, syscall emulation, and ongoing developments in container security.
Journey from Early Linux to Snap Packaging and WSL - Ubuntu Summit 2022
Explore a developer's Linux journey, from early experiences to Snap packaging and WSL2 innovations, highlighting unique capabilities and the evolution of Linux-native workflows on Windows.
Secure the Linux Kernel with eBPF Linux Security Module
Explore eBPF Linux Security Module for implementing granular security policies in the Linux kernel without configuration or kernel modules. Learn to leverage BPF LSM hooks for MAC and DAC policies.
Building the Largest Working Set of AppArmor Profiles
Explore the development of an extensive AppArmor profile set, covering challenges, security architecture, program selection, and integration testing for enhanced Linux system protection.
Sysarmor: Meta's eBPF Security Detection and Enforcement Tool
Explore Meta's Sysarmor: an eBPF-based security daemon for threat detection and rule enforcement in high-risk environments, featuring efficient in-kernel evaluation and innovative approaches to process and container monitoring.
BPF_LSM and fsverity for Binary Authorization
Flexible binary authorization solution using BPF_LSM and fsverity for enhanced system security. Combines file integrity checksums, secure signing, and access control enforcement.
Are Our Systems Using Up-to-Date Cryptography?
Explore modern cryptography auditing techniques using USDT and eBPF to detect legacy algorithms, ensuring system security without compromising performance or privacy.
Binary Policy with IMA and AppArmor for Linux Workstations
Explore Google's innovative approach to Linux workstation security using IMA signatures and AppArmor for binary policy enforcement, addressing challenges in large-scale implementation.
TrenchBoot: Enhancing System Security with Intel TXT and AMD SVM
Explore TrenchBoot's integration of hardware-rooted security for open and proprietary systems, reducing attack surfaces and enhancing platform integrity through Intel TXT and AMD SVM technologies.
Application Whitelisting: Preventing Unknown Software Execution
Learn about application whitelisting for system security, including implementation, policy design, and real-time system integrity maintenance. Explore open-source solutions and broader security strategies.
Making Remote Attestation Useful on Linux
Explore TPM remote attestation on Linux, its current limitations, and potential improvements for enhanced security and trust in boot processes.
Safely Restricting File Access with Landlock - A Programmatic Approach
Explore Landlock's innovative approach to file access control, addressing limitations of existing LSMs and enabling safe, unprivileged security policy implementation for Linux systems.
Extending OpenPOWER Boot Security to Guests
Explore secure boot design for KVM and PowerVM guests on OpenPOWER, addressing unique challenges and leveraging open source solutions to enhance OS boot security.
Security Module Stacks: Flexibility and Pitfalls in System Security Configuration
Explore security module stacking pitfalls and solutions for Linux systems. Learn configuration strategies, conflict avoidance, and networking considerations from an experienced kernel developer.
A Canonical Event Log Structure for IMA - Optimizing Attestation Information
Explore a new Canonical Event Log structure for IMA, enhancing Linux system attestation with algorithm agility, sequence numbering, and optimized storage for improved security and efficiency.