Kees Cook
where else to find them
what they talk about
where they keep going back
- Linux Security Summit North America7 editions2018–2025
- Linux Plumbers Conference3 editions2022–2025
- linux.conf.au2 editions2020–2022
all 5 in the filters
on a stage with
all 9 in the filters
who talks about the same things
- Greg Kroah-Hartman36 talks
- Elena Reshetova17 talks
- Ignat Korchagin36 talks
- Marta Rybczynska38 talks
- Paul Moore13 talks
- Christian Brauner30 talks
| title | conference | date |
|---|---|---|
| Security Features status update | Linux Plumbers Conference 2025 | 2025-12-11 |
GCC, Clang, and Rust reach concrete parity on several items: per-thread stack protector guard locations are implemented across RISC-V, PowerPC and s390, and… | ||
| type-based slab allocation: kmalloc_obj family | Linux Plumbers Conference 2025 | 2025-12-11 |
Proposal changes slab allocator to be type-aware by introducing kmalloc_obj() v4/v5 so allocations return typed pointers instead of void, and it converts the… | ||
| Kernel Hardening: Ten Years Deep | Linux Security Summit North America 2025 | 2025-06-26 |
Project started in 2015, created measurable results: average CVE lifetime drops after years of stagnation and many buffer and integer overflow classes fall… | ||
| Mitigating Integer Overflow in C | Linux Security Summit North America 2024 | 2024-04-18 |
Kernel work shows hundreds of CVEs tied to integer overflow over the last decade and pushes concrete fixes: extend sanitizers to detect overflows regardless of… | ||
| Security Features status update | Linux Plumbers Conference 2023 | 2023-11-13 |
Toolchains now match on fstrict-flex-arrays=3, -fsanitize=bounds and __builtin_dynamic_object_size(); GCC landed changes in 13–15 and Clang in 16 for trailing… | ||
| Progress On Bounds Checking in C and the Linux Kernel | Linux Security Summit North America 2023 | 2023-05-10 |
Effort converts trailing zero/one-length arrays into real C99 flexible array members, adds -fstrict-flex-arrays and per-struct size annotations, and wires… | ||
| Where are we on security features? | Linux Plumbers Conference 2022 | 2022-09-12 |
The update reports concrete compiler and kernel work: compilers and kernel reach parity on zeroing call-used registers and on structure-layout randomization… | ||
| Welcome & Opening Remarks & Meaningful Bounds Checking in the Linux Kernel | Linux Security Summit North America 2022 | 2022-06-23 |
Analyzes three years of kernel CVEs and finds 25 heap buffer overflows with 11 memcpy overflows that the compiler could have detected; instruments an… | ||
| Meaningful Bounds Checking in the Linux Kernel | linux.conf.au 2022 | 2022-01-14 |
Audit of recent kernel CVEs finds 11 memcpy overflows (including BleedingTooth) that the compiler could have caught by using __builtin_object_size mode 1… | ||
| Control Flow Integrity in the Linux Kernel | Linux Security Summit North America 2020 | 2020-07-01 |
Control Flow Integrity is implemented in the kernel by using clang LTO to generate per-prototype jump tables that validate indirect calls (assembly uses an… | ||
| Panel Discussion: What is Lacking in Linux Security and What Are or Should We be Doing about This | Linux Security Summit North America 2020 | 2020-07-01 |
Panel lays out concrete gaps and fixes: too few tests and regression suites, reliance on continuous fuzzing (syzkaller) but no oracle to mark security‑relevant… | ||
| Control Flow Integrity in the Linux Kernel | linux.conf.au 2020 | 2020-01-13 |
Linux kernel gets forward-edge checks by inserting per-type jump tables and runtime validation using Clang/LLVM CFI, requires whole-kernel visibility via thin… | ||
| Subsystem Update: Seccomp, Yama, and LoadPin | Linux Security Summit North America 2019 | 2019-08-19 |
Update surveys three small kernel defenses and their concrete changes: LoadPin pins modules and any kernel-read files to the first block device, extended to… | ||
| Kernel Self-Protection Project | Linux Security Summit North America 2019 | 2019-08-19 |
Year-in-review of defenses landed across kernels 4.19–5.3: removal of VLA usage, conversions to overflow-checking refcounts, implicit-fallthrough annotations… | ||
| Overview and Recent Developments: Kernel Self-Protection Project | Linux Security Summit Europe 2018 | 2018-10-25 |
Shows that KSP lands concrete defenses across kernels 4.14–4.18: vmapped stacks, SLUB freelist obfuscation, structure randomization, set_fs() checking, fast… | ||
| Overview and Recent Developments: seccomp and Small Linux Security Modules | Linux Security Summit Europe 2018 | 2018-10-25 |
Crash-course on three kernel features and what actually changed: LoadPin with dm-verity pins kernel reads to a cryptographically verified backing filesystem so… | ||
| Making C Less Dangerous | Linux Security Summit North America 2018 | 2018-08-27 |
Kernel C changes focus on concrete fixes: removing Variable Length Arrays reduces hundreds of patches to a few remaining and converts hot paths to fixed-size… | ||
| Sub-system Update: Kernel Self-Protection Project | Linux Security Summit North America 2018 | 2018-08-27 |
Year-in-review of defenses landed across kernels 4.14–4.19: concrete features include vmapped stacks, fast refcount_t protection backported to 4.14, SLUB… | ||
| The State of Kernel Self Protection Project | Linux Security Summit 2016 | 2016-08-25 |
Project quantifies risk and ships mitigations: analysis of 557 CVEs shows about a 5 year average lifetime for many kernel bugs, so defenses must assume bugs… | ||
| Seecomp | Linux Security Summit 2016 | 2016-08-25 |
Covers seccomp work landing between Linux 4.3 and 4.8: adds architecture support for powerpc tile usermode linux parisc, expands the regression test suite… | ||
| nothing matches | ||