Defending JavaScript Projects from Supply Chain Attacks - Running Code from the Internet Safely
Explore proactive defenses against JavaScript supply chain attacks, including access control and future JS features for enhanced project security.
Hardening JavaScript for Supply Chain Security
Explore advanced techniques for securing JavaScript dependencies, including Compartments and LavaMoat, to protect against supply chain attacks and enhance runtime security.
Go Containerless on Kubernetes with WebAssembly and Rust - Conf42 Rustlang 2024
Explore containerless deployment on Kubernetes using WebAssembly and Rust. Learn advantages, limitations, and practical implementation for efficient, secure application deployment.
Orchestrating eBPF Programs in Kubernetes
Explore eBPF technology in Kubernetes, focusing on Bpfman for simplified deployment. Learn about practical applications, security considerations, and industry adoption of this revolutionary kernel technology.
Perfect Sandboxing in Bazel - Enforcing Host Filesystem Dependencies
Discover how to achieve perfect sandboxing in Bazel by encoding and enforcing host filesystem dependencies, with practical insights from migrating a 20-year-old codebase and implementing enhanced dependency management.
Defense in Depth: Isolating Mesa From the Kernel
Explore advanced security techniques for isolating graphics drivers from kernel access, using virtualization and helper processes to protect against potential exploits in browser environments.
Less Power for More Learning - Restricting OCaml Features for Effective Teaching
Explore a framework for sandboxing OCaml features to automate grading of programming exercises, including feature restriction, mock IO system, and security considerations.
A Python Sandbox for Dynamic Rule Execution
Explore a Python sandbox for dynamic rule execution, covering its purpose, benefits, limitations, and best practices for implementation.
When "Go Build" Is Not Enough: Introduction to Bazel - Lecture 1
Explore Bazel for advanced Go build processes, covering dependencies, caching, sandboxing, and extensibility. Learn to optimize builds beyond "go build" for complex projects.
Using Rust and WebAssembly
Explore WebAssembly's potential in Rust development, from key benefits to practical applications. Learn to build, optimize, and integrate WASM with JavaScript, while understanding its challenges.
Safely Extending the Kubernetes Scheduler with WebAssembly - A Tale of Two Plugins
Explore WebAssembly as an alternative for extending Kubernetes Scheduler, understanding its benefits, challenges, and implementation details compared to the Scheduling Framework.
Why WebAssembly is the Next Wave of Cloud Computing
Explore WebAssembly's role in cloud computing, its advantages over VMs and containers, and its potential for building fast, scalable microservices and web apps.
Flathub in 2023: Revolutionizing the Linux App Ecosystem
Explore Flathub's progress in 2023: improved website, increased apps, distribution integration, and enhanced gaming support. Discover how Flathub is transforming the Linux app ecosystem.
Docker and WASM - The Powerful Combo
Explore Docker and WASM integration, learn to run WASM modules using Docker desktop, and discover the potential of this powerful combination for enhanced containerization and performance.
The Journey of the Node.js Permission Model
Explore the creation of Node.js Permission Model, uncovering motivations, challenges, and solutions. Gain insights into this experimental security feature and its impact on the ecosystem.
Sandboxing .NET Assemblies for Fun, Profit and of Course Security
Explore techniques for sandboxing third-party .NET libraries to enhance application security. Learn to create restricted environments, limiting functionality and improving overall security posture.
Sandboxing .NET Assemblies for Fun, Profit and of Course Security
Explore techniques for sandboxing .NET assemblies to enhance application security, limit third-party library risks, and create restricted environments for external modules using AssemblyLoadContext.
Novel Sandboxing Techniques for Open Source Libraries Using eBPF and KRSI
Discover how to implement advanced sandboxing techniques for open source libraries using eBPF and KRSI technologies to enhance security and protect against vulnerabilities and exploits.
Secure and Efficient Sensing Applications with WebAssembly - Sony's Edge AI Platform
Discover how WebAssembly enhances edge AI platforms for secure, efficient sensing applications, focusing on Sony's open-source solution for IoT development and device management.
WINE Pairing with Malware - Using Linux Tools for Malware Analysis
Discover how to leverage WINE and Linux tools for malware analysis, extracting forensic evidence, and testing offensive security techniques without expensive sandboxes.
Seccomp Filtering for Struct Pointers
Explore advanced seccomp filtering techniques for struct pointers, enhancing system call security in Linux environments.