Securing TPM Secrets with TXT and Kernel Signatures
Explore securing TPM2 NVRAM data using Intel TXT and tboot extensions for kernel signature verification, enhancing protection while maintaining usability during kernel updates.
Integrity Measurements and the Cruel World
Explore integrity measurement systems for embedded devices, overcoming challenges in security-enhanced Android and Linux to improve reliability without compromising user experience.
Backdoor in the Core - Altering Intel x86 Instruction Set at Runtime
Dive into groundbreaking research on Intel CPU microcode manipulation, exploring techniques for persistent modifications and potential security implications through microcode backdoors in x86 instruction sets.
Seccomp Filtering for Struct Pointers
Explore advanced seccomp filtering techniques for struct pointers, enhancing system call security in Linux environments.
Ubuntu Security Best Practices on Cloud
Enhance cloud security with Ubuntu: Learn best practices, implementation strategies, and essential tools for robust protection.
Update on Landlock: Audit, Debugging and Metrics - Kernel Recipes 2023
Explore Landlock's advancements in Linux application sandboxing, focusing on audit, debugging, and metrics for enhanced security policy management.
Using Seccomp to Limit the Linux Kernel Attack Surface
Explore seccomp for limiting Linux system calls, enhancing application security. Learn implementation, tools, and considerations for effective use in containers, browsers, and more.
Three Years of Lessons from Running Potentially Malicious Code Inside Containers
Insights on securing Docker and Kubernetes environments, monitoring for malicious activity, and preparing for potential attacks based on real-world experiences with Katacoda.
Chisel - Building Minimal and Secure Ubuntu Containers from the Ground Up
Discover how to build minimal, secure Ubuntu container images using Chisel - a tool that creates optimized filesystem slices while maintaining package manager compatibility and reducing attack surfaces.
How to Extract the XZ Backdoor Malware Payload
Discover essential techniques for analyzing and extracting XZ backdoor malware payloads, focusing on security investigation and threat assessment methodologies.