Why Should You Consider JavaScript on WebAssembly?
Explore WebAssembly's potential for running JavaScript securely in new environments, improving performance and security. Learn about Javy project and see real-world use cases.
Building Serverless AI Workflows with Wasm and Rust
Explore building customized AI workflows using WebAssembly and Rust for serverless functions. Learn to create secure, lightweight solutions integrating with LLMs and various SaaS platforms.
Sandboxing Wasm Programs - Syscall Isolation Techniques for Edge Computing
Explore Wasm runtime sandboxing techniques, including SELinux, cgroups, and seccomp. Learn about Callander, a novel syscall sandboxing tool, to enhance security in edge computing platforms.
Towards Kata Containers 4 - When Kata Containers Meet Service Mesh
Explore security challenges and solutions for Kata Containers in service mesh environments, focusing on threat models, infrastructure sidecar designs, and performance benchmarks.
Zero Trust Architecture for Containers with Kata and Confidential Computing
Dive into advanced container security using Kata and Confidential Computing to implement zero-trust architecture, protect sensitive workloads, and achieve attestable pod integrity in Azure environments.
Towards the Hardened Cloud-Native Cornerstone: Container Runtime Protection
Explore advanced container runtime protection techniques, from kernel-aided to hardware-assisted solutions, addressing security risks and privacy concerns in cloud-native environments.
Securing CI/CD Runners Through eBPF Agent
Explore eBPF agent implementation for securing CI/CD runners. Learn about attack vectors, open-source ecosystem threats, and practical strategies for enhancing pipeline security.
Calling OPA from eBPF Through WASM in the Kernel - Exploring Unconventional Technology Integration
Explore the integration of eBPF, WASM, and OPA in kernel space, showcasing innovative approaches to cloud-native technologies and their potential impact on system performance and security.
Exotic Runtime Targets: Ruby and Wasm on Kubernetes and GitOps Delivery Pipelines
Explore Ruby and WebAssembly deployment on Kubernetes, examining GitOps pipelines and the evolving landscape of runtime environments for developers seeking innovative solutions beyond traditional JavaScript.
eBPF and WebAssembly for Lightweight Observability in Kubernetes
Explore how eBPF and WebAssembly combine to enhance lightweight observability in Kubernetes clusters, offering efficient network traffic management and streamlined deployment of eBPF programs.
RISC-V-Based Sandboxing for Secure and Efficient Software Execution
Explore an efficient RISC-V virtual machine for sandboxed environments, featuring reduced memory usage and JIT compilation for secure software execution.
Security in Zephyr and Fuchsia - Comparing Emerging Open Source Operating Systems
Explore security architectures and mechanisms in Zephyr and Fuchsia operating systems, comparing them to Linux. Learn about ongoing advancements and unique approaches to IoT and microkernel-based security.
Running Untrusted Code with gVisor - Container Security and Sandboxing
Explore gVisor, an open-source sandbox runtime for enhanced container security. Learn its architecture, use cases, and advantages over other approaches, with a demo of a minimal serverless platform using gVisor and Kubernetes.
Deep Dive into Landlock Internals
Explore Landlock's security sandboxing features, internals, and roadmap. Learn about access control, ruleset creation, and policy composition for enhanced system protection.
SandBox Mode - New Execution Mode Between Kernel and User Space
Explore SandBox Mode, a novel approach to mitigate kernel memory corruption vulnerabilities by executing potentially buggy code in isolated address spaces, offering precision and efficiency without production overhead.
Unprivileged Access Control in AppArmor
Explore AppArmor's extension for unprivileged access control, including challenges, changes, and API development for enhanced application security and sandboxing capabilities.
Sandboxing in Linux with Zero Lines of Code
Explore Linux seccomp for process sandboxing without coding. Learn fine-grained controls, performance benefits, and approaches to easily secure applications in any programming language.
Minijail: Running Untrusted Programs Safely
Explore Minijail, a powerful sandboxing tool for secure execution of untrusted code. Learn its applications in Chrome OS, Android, and server environments, including containerized Android on Chrome OS.
Update on Landlock: IOCTL Support
Explore Landlock security module's features, recent developments, and new IOCTL restriction support for enhanced Linux process sandboxing and security policies.
Security Technology Arms Race 2021 - Medal Event
Explore the evolving security landscape, examining offensive and defensive strategies, technological breakthroughs, and future trends in cybersecurity. Gain insights into the ongoing arms race between attackers and defenders.
Koadic C3 - Windows COM Command & Control Framework
Explore Koadic C3, a Windows COM-based command and control framework. Learn about VBScript, threading, HTML applications, and lateral movement techniques for advanced penetration testing.