CAP-VMs - Capability-Based Isolation and Sharing in the Cloud
Explore capability-based isolation and efficient data sharing in cloud environments using cVMs, a novel VM-like abstraction leveraging memory capabilities for enhanced security and performance.
KRCORE - A Microsecond-scale RDMA Control Plane for Elastic Computing
Microsecond-scale RDMA control plane for elastic computing, enabling rapid connection establishment and efficient data transfer in distributed systems and serverless environments.
Scaling Open vSwitch with a Computational Cache
Innovative approach to scale Open vSwitch using NuevoMatch algorithm, improving packet classification performance and rule update speed for enhanced network virtualization efficiency.
The Storage Architecture of Intel's Data Management Platform
Intel's DMP storage architecture employs Ethernet-based fabric, disaggregated storage, and Kubernetes management. It offers NVMe-oF remote volumes and local Optane DCPM volumes, optimized for different I/O patterns and managed by LINBIT's storage orchest…
The Design and Implementation of Open vSwitch
Explore the architecture, design, and performance optimizations of Open vSwitch, an open-source virtual switch for hypervisor platforms, focusing on flow classification and caching techniques.
coIOMMU - A Virtual IOMMU with Cooperative DMA Buffer Tracking for Efficient Memory Management in Direct I/O
Explore efficient memory management in direct I/O virtualization through coIOMMU, a novel virtual IOMMU architecture with cooperative DMA buffer tracking for improved performance and resource utilization.
Ten Persistent SRE Antipatterns - Pitfalls on the Road to a Successful SRE Program
Explore common pitfalls in Site Reliability Engineering and learn strategies to build successful SRE programs, drawing insights from industry leaders like Netflix and Google.
It's a Trap! How Abstractions Have Failed Us
Explores how excessive abstraction in tech can lead to complexity, loss of foundational knowledge, and disconnection from original problems. Offers insights on balancing abstraction with practicality.
Lessons Learned from a Ransomware Attack
Comprehensive analysis of a real-world ransomware attack on a school district, covering timeline, damage, recovery, and preventive measures for future cybersecurity preparedness.
Escape From The Docker KVM QEMU Machine
Explore Docker and KVM-QEMU escape techniques, vulnerabilities, and exploitation methods in cloud computing systems. Learn about container escape, QEMU device emulator flaws, and virtual machine escape strategies.
You Might Still Need Patches for Denim
Explore container patch management strategies, including image registry maintenance, continuous deployment, and Google's approach to critical vulnerability patching without downtime.
ECMO - Rehost Embedded Linux Kernels via Peripheral Transplantation
Innovative technique for rehosting embedded Linux kernels in QEMU using peripheral transplantation, enabling dynamic analysis of firmware images from diverse embedded devices.
Mobius Band - Explore Hyper-V Attack Interface through Vulnerabilities Internals
Explore Hyper-V vulnerabilities and attack interfaces, focusing on 3 RCE vulnerabilities in Microsoft's virtualization solution. Gain insights into cloud security and potential risks.
Back to the Future - A Radical Insecure Design of KVM on ARM
Explore ARM architecture vulnerabilities in KVM, focusing on privilege escalation through exception-generating instructions and hypervisor calls. Learn about potential security risks in virtualization.
Straight Outta VMware - Modern Exploitation of the SVGA Device for Guest-to-Host Escapes
Explore modern exploitation techniques for VMware Workstation's virtual graphics device, analyzing the graphics pipeline to achieve guest-to-host code execution in this in-depth security presentation.
How to Find Bugs in USB Device Drivers
Explore USB device driver vulnerabilities using vUSBf framework. Learn about fuzzing techniques, bug detection, and potential security risks in USB implementations across various operating systems.
Poacher Turned Gamekeeper - Lessons Learned from Eight Years of Breaking Hypervisors
Explore hypervisor vulnerabilities, attack surfaces, and security design flaws through real-world examples. Learn key lessons for improving hypervisor security and hardening techniques.
Slime - Automated Anti-Sandboxing Disarmament System
Automated system to disarm malware with anti-sandbox techniques, focusing on host-fingerprinting and general anti-sandboxing. Analyzes exit reasons and suggests suitable environments for dynamic analysis of evasive malware.
Virtual Machines and Service Mesh in the Enterprise - 5 Things You Need to Know
Explore key challenges and solutions for integrating non-Kubernetes workloads into service mesh, focusing on VM onboarding, multi-cloud setups, and certificate preservation for enterprise environments.
Virtual Machines as First Class Citizens in Service Mesh
Explore integrating virtual machines into service mesh, addressing challenges in automation, multi-cluster deployment, and canary deployments between pods and VMs. Includes practical demo.
FlowBlaze - Stateful Packet Processing in Hardware
Innovative hardware-based solution for stateful packet processing, enabling high-speed network functions with low latency and power consumption using Extended Finite State Machines on programmable NICs.