Leveraging and Managing SBAT Revocation Mechanism on Distribution Level
Explore SBAT revocation mechanisms at the distribution level, focusing on leveraging and managing these systems for enhanced security and efficiency.
Catching Linux Post-Exploitation with Auditd
Learn to detect Linux post-exploitation using Auditd. Explore system calls, audit rules, and attack scenarios for enhanced security monitoring and threat detection.
Smartphones Insecurity
Comprehensive analysis of smartphone vulnerabilities, exploring security flaws and potential exploits in mobile platforms. Insights from experienced security researchers on reverse engineering and exploit development.
Trace Me if You Can - Bypassing Linux Syscall Tracing
Novel vulnerabilities and exploitation techniques to bypass Linux syscall tracing, even with security measures like seccomp, SELinux, and AppArmor in place. Demonstrates how user-mode programs can evade detection.
Rolling Your Own Security Team for Fun and No Profit at All
Explore the evolution, challenges, and lessons of the Arch Linux Security Team. Learn how to establish and contribute to a distro security team, gaining insights into efficient practices and future improvements.
Pam Panic - A Linux Authentication Module for People in Distress
Explore pam_panic, a Linux authentication module for protecting encrypted data in distressing situations. Learn about LUKS, implementation scenarios, and see a live demonstration of the module in action.
Using the TPM NVRAM to Protect Secure Boot Keys in POWER9 OpenPOWER Systems
Explore TPM NVRAM's role in safeguarding secure boot keys for POWER9 OpenPOWER systems, covering design and implementation aspects in firmware and Linux kernel layers.
Kernel Runtime Security Instrumentation
Explore extensible Linux security with eBPF programs, enabling custom security and auditing solutions without kernel modifications. Learn design, interfaces, and practical applications.
Infoflow LSM
Explore Linux security models, integrity policies, and LSM framework implementation with a focus on multilevel security and policy enforcement techniques.
The Future of Security is in Open Silicon
Explore open silicon's role in future security, focusing on RISC-V processors and Zephyr OS to create a secure root of trust for Linux systems. Learn about hardware security cores and privilege levels.
EBPF Superpowers
Explore eBPF's powerful capabilities for Linux, focusing on container contexts. Discover practical applications through demos and learn how to leverage this technology effectively.
MDS, Fallout, Zombieland & Linux
Explore recent CPU vulnerabilities, their impact on Linux, and security fixes with kernel developer Greg Kroah-Hartman in this insightful keynote address.
AppArmor
Explore AppArmor's security features, development process, and integration with LxD, guided by Canonical security expert John Johansen.
SELinux
Explore SELinux's security features for Linux systems, covering containers, file systems, networking, and Android implementations.
Docker - Security Myths, Security Legends
Explore Docker's security implications, debunking myths and highlighting real benefits for containerization, with practical insights on implementation and best practices.
Exploiting Linux and Pax ASLR's Weaknesses on 32-Bit and 64-Bit Systems
Uncover vulnerabilities in Linux and PaX ASLR implementations, exploring low entropy, distribution issues, and object correlations. Learn to bypass Full ASLR and discover ASLR-NG, a new design addressing current weaknesses.
Linux Secure Boot
Erfahrungen und Konzepte zur Implementierung von Secure Boot auf Linux-Systemen, um Schadsoftware und manipulierte Betriebssysteme zu verhindern.
Sandboxing in Linux with Zero Lines of Code
Explore Linux sandboxing techniques without coding, focusing on process startup stages and practical examples. Learn to enhance security and control system calls effectively.
Decade of the RATs – Custom Chinese Linux Rootkits for Everyone
Uncovers a decade-long, state-sponsored cyber espionage campaign targeting Linux servers, revealing custom malware and rootkits used in strategic attacks on government and industry infrastructure.
Kubernetes Security 101
Comprehensive overview of Kubernetes security layers, covering sysadmin, developer, and security team perspectives. Explores hardening guides, container security, deployment strategies, and collaborative approaches.
A Beginner's Guide to eBPF Programming with Go
Explore eBPF programming with Go through live coding examples. Learn about kernel-level programs, syscalls, maps, and custom event attachments for enhanced Linux observability and security.