~/talk

USEC: A User-Requirement-Driven Mandatory Access Control Framework for Operating Systems

on YouTube 19m
Talkat 20th USENIX Symposium on Operating Systems Design and Implementation (OSDI '26) · 2026-07-13..07-15· [security, linux-and-operating-systems]

speakers

name:Yu Jiang
links:none on file
name:Wenhuan Liu
links:none on file
name:Fuchen Ma
links:none on file
name:Yuheng Shen
links:none on file
name:Yuanliang Chen
links:none on file
name:Lei Zhang
links:none on file
name:He Li
links:none on file
name:Quan Zhang
links:none on file
name:Chijin Zhou
links:none on file

resources

video:https://youtu.be/jvHh9l2qHew
slides:none on file

summary

Implements a Linux security extension that anchors policies at protected files, sockets and device nodes instead of process domains, compiles those templates to retained LSM hook bitmaps, and uses a cached decision path so unrelated syscalls skip the MAC engine. Policies are up to 10× fewer lines and runtime cost is 3.4%–17.1% lower than SELinux across server and desktop workloads. Uses binary-compatible LSM interfaces, integrates with existing modules, and is deployed by 210+ vendors on over 8,000,000 endpoints.

AI-written summary · about

chapters (8)

  1. 0:00USEC framework intro
  2. 3:54Deployable MAC research question
  3. 8:39USEC core design ideas
  4. 15:34Implementation and evaluation
  5. 16:36Policy complexity results
  6. 18:02Runtime overhead findings
  7. 18:42Compatibility benefits
  8. 19:04Q&A

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.