One Port to Serve Them All - Google GCP Cloud Shell Abuse
Uncovers security vulnerabilities in GCP Cloud Shell, demonstrating how attackers can exploit a public-facing port to access internal services and bypass authentication, potentially leading to data leaks and network attacks.
Advanced rp_filter: Challenges and Pitfalls in IP Source Address Validation
Explore IP source address validation techniques, focusing on Reverse Path Forwarding (RPF) and Linux kernel's rp_filter implementations. Gain insights into challenges and considerations for advanced networking scenarios.
Overview of the Linux Kernel Security Subsystem
Explore Linux kernel security: history, components, and community involvement. Learn about access control, capabilities, auditing, and security modules from a Microsoft expert.
Improving Open vSwitch & Network Stack Integration
Explore strategies for integrating Open vSwitch with kernel components like Netfilter, focusing on performance, programmability, and network stack integration.
Android Netfilter Changes
Exploring Android netfilter changes and efforts to merge functionality with upstream Linux, focusing on ConfigFS gadget integration and remaining challenges for Android migration.
Netfilter Hardware Offloads
Explore hardware offloads in netfilter using flow rule and flow block APIs, covering payload mangling and connection tracking flowtable bypass for improved network performance.
Bypassing Conntrack - Optimizing K8s Service by Enhancing IPVS with EBPF
Optimizing Kubernetes Service performance with IPVS-eBPF: a novel load balancer that bypasses Netfilter, achieving significant throughput gains for TCP connections.
Offloading Network Traffic Classification to Hardware
Explore hardware offloading for network traffic classification, including use cases, implementation, and future developments in Linux networking.