The State of Kernel Self Protection Project by Kees Cook, Google
The Linux Foundation1 HN recommender · recommended in 1 month, 2016-2019
7K views · 9 years ago · talk · dated
Kees Cook of Google gives a Linux Foundation talk on the Kernel Self Protection Project, which aims to harden Linux against attackers. He surveys threats, the state of available defensive technologies and a year of community progress.
Cited as the authoritative overview of kernel hardening goals and priorities, including Cook's car-safety analogy for kernel security.
33:53Linux for Chromebooks: Secure Development (Google I/O ’19)
Chrome for Developers
239K views • 7 years ago
50:06Protected KVM on Arm64: A Technical Deep Dive - Quentin Perret, Google
The Linux Foundation
6K views • 4 years ago
38:03Replace Your Exploit-Ridden Firmware with Linux - Ronald Minnich, Google
The Linux Foundation
73K views • 9 years ago
56:19MINIX 3: a Modular, Self-Healing POSIX-compatible Operating System
FOSDEM
90K views • 16 years ago
47:18The Tragedy of systemd
linux.conf.au
1.3M views • 7 years ago
53:0236C3 - A systematic evaluation of OpenBSD's mitigations
media.ccc.de
18K views • 6 years ago
34:51Capsicum: Practical Capabilities for UNIX
USENIX
11K views • 16 years ago
1:02:52Joanna Rutkowska: Towards (reasonably) trustworthy x86 laptops
media.ccc.de
27K views • 10 years ago
32:30Benno Rice: The Tragedy of systemd -- BSDCan 2018
BSDCan
25K views • 8 years ago
37:34Linux Kernel Development, Greg Kroah-Hartman - Git Merge 2016
GitHub
72K views • 9 years ago
33:36Keynote: Greg Kroah-Hartman (Linux Foundation) - "I Don't Want Your Code"
Linaro On Air
0 views • 13 years ago
34:14"What UNIX Cost Us" - Benno Rice (LCA 2020)
linux.conf.au
218K views • 6 years ago
53:53Hackfest 2015: Theo de Raadt presented "Pledge: A new security technology in openbsd"
Hackfest Communication
27K views • 10 years ago
5:22Lest We Remember: Cold Boot Attacks on Encryption Keys
pucitp
749K views • 18 years ago
53:11EFI and Linux: the future is here, and it's awful - Matthew Garrett
Linux.conf.au 2012 -- Ballarat, Australia
77K views • 14 years ago
56:52Florian Grunow, Niklaus Schiess: Lifting the Fog on Red Star OS
media.ccc.de
46K views • 10 years ago
1:45:47Bryan Cantrill on Jails and Solaris Zones
PapersWeLove
34K views • 10 years ago
0:27Linus Torvalds - Backdoor In Linux
Sam Abdullaev
155K views • 13 years ago
35:16Filesystem in Rust - Kent Overstreet
The Linux Foundation
124K views • 2 years ago
53:40GrapheneOS: Documenting Numerous Attacks Against CalyxOS,, Techlore, & More
Techlore
135K views • 5 years ago
4 comments from Hacker News
Really?!? Then you should advise Google on what they are doing wrong. "The State of Kernel Self Protection Project by Kees Cook, Google" ▶ this video
> But… till now they’ve hardly accomplished anything compared to what PaX/Grsecurity did, e.g. they ported some mitigations while introducing more (exploitable?) bugs or incomplete implementations That doesn't seem particularly charitable. Regardless of what you think of the Linux Foundation's marketing arm, the KSPP is not a bad thing. They seem to have a very different priority to PaX/Grsecurity, with an emphasis on things that have a clear technical/political/etc path to being enabled by default. I really enjoyed this talk about KSPP's agenda: ▶ this video
Here is Kees Cook talk from the Linux Security Summit, "The State of Kernel Self Protection Project", he makes the same analogy to car safety in his talk: ▶ this video All the available videos from the Linux Security Summit are listed here: link
He gave two talks, the one he referenced in the article, "The State of Kernel Self Protection Project", is here: ▶ this video All the available videos from the Linux Security Summit are listed here: link