Linux Security Summit Europe 2023
2023-09-20..2023-09-21
-- online --
[Linux Security Summit Europe 2018, Linux Security Summit Europe 2019, Linux Security Summit Europe 2022, Linux Security Summit Europe 2023, Linux Security Summit Europe 2024, Linux Security Summit Europe 2025]
| title | author | length |
|---|---|---|
| Welcome & Opening Remarks | Elena Reshetova | 04m |
Small room with more interaction, one schedule change: the 3pm session becomes virtual 3pm talk with live Q&A; lunch is at 12:40; a hands-on landlord Workshop… | ||
| BPF and Security. Friends and Foes | Alexei Starovoitov | 57m |
Claims that unprivileged BPF helped discover speculative‑execution CPU bugs and that BPF_LSM plus BPF/XDP actually protect hyperscaler clouds are backed by… | ||
| Genmai: A Security Vulnerability Detection Framework for Linux Operating.. | Gao Tong, Song Chengjin | 23m |
Genmai is a Go-based framework that validates vulnerabilities by running PoCs in a sandbox mode to avoid host damage and uses fuzzing for kernel and interface… | ||
| Estimating Security Risk Through Repository Mining | Tamas K Lengyel | 36m |
Compares OpenSSF Scorecard scores to bugs found by running Scan-build, Facebook Infer and an experimental binary tool across ~2,000 C/C++ GitHub repos (>=400… | ||
| A PKCS #11 Signing Provider for OpenSSL | Reinhard Buendgen | 48m |
Builds a pkcs11-sign provider that lets OpenSSL 3.x call HSM signing operations via PKCS #11 while keeping ephemeral ECDH and symmetric work in software… | ||
| Enabling Hardware-Assisted Shields for Linux Security Subsystems | Zahra Tarkhani | 26m |
A kernel abstraction called Hardware Shields provides memory isolation, code/data signing and read‑only metadata storage with two backends: Morello CHERI using… | ||
| OP-TEE: Using the ARM Trust-Zone to Control Tamper Resistant Processors | Jorge Ramirez-Ortiz | 48m |
OP-TEE: Using the ARM Trust-Zone to Control Tamper Resistant Processors - Jorge Ramirez-Ortiz, Foundries.io.Ltd.
Whether your ARM-based system uses secure… | ||
| Welcome Back & Check-In | Elena Reshetova | 03m |
Morning attendance runs a bit low compared with yesterday but expected to recover; the afternoon runs a landlocked Workshop that requires small… | ||
| Hardware-backed Per-process Secrets | Matthew Garrett | 43m |
Proposes sealing TPM secrets to processes or namespaces so a TPM blob can only be loaded while a specific process or container is running, implemented as… | ||
| Blueprint for Secure Boot and Data Integrity Using rustBoot... | Ulrich Matejek, Philipp Ahmann | 23m |
Blueprint provides a concrete implementation: use rustBoot or U-Boot signed FIT images to authenticate kernel/initramfs, compute a dm-verity hash tree for the… | ||
| LSM Updates: IMA, SELinux, AppArmor, SMACK &... | Roberto Sassu, Paul Moore, John Johansen, KP Singh | 01h 14m |
IMA and EVM become regular LSMs via LSM stacking and shared security blobs, add machine keyring support, and ship IMA/EVM utils 1.5 with UML test pipelines; an… | ||
| Update on Landlock: Audit, Debugging and Metrics | Mickaël Salaün | 23m |
Landlock adds auditable denied-access logs via the Linux audit framework, showing rule-set id 1 creating domain id 2 and explicit EACCES (errno 13) denies with… | ||
| Landlock Workshop: Sandboxing Application for Fun and Protection | Mickaël Salaün | 01h 17m |
Workshop shows how to add Landlock syscalls to a C CLI to confine an old ImageMagick exploit: creates a ruleset with landlock_create_ruleset, adds specific… | ||
| nothing matches | ||