Loading…
Monday, August 19 • 11:35am - 12:15pm
Kernel Runtime Security Instrumentation - KP Singh, Google *

Sign up or log in to save this to your schedule and see who's attending!

Tweet Share
Feedback form is now closed.
Kernel Runtime Security Instrumentation (KRSI) [1] aims to provide an extensible Linux Security Module (LSM) by allowing userspace programs and system owners to attach eBPF (extended Berkeley Packet Filter) programs to security hooks. This makes the LSM framework extensible without needing to rebuild/re-write and enables a new class of security and auditing software.

The talk discusses the need for such an LSM (with representative use cases) and compares it to some existing alternatives, such as Landlock, a separate custom LSM, kprobes+eBPF etc. The second half of the talk outlines the proposed design and interfaces, and includes a live demo.

[1] https://github.com/sinkap/linux-krsi
Speakers
avatar for KP Singh

KP Singh

Senior Software Engineer, Google
KP Singh is a Senior Software Engineer with Google based in Zürich and is the Tech Lead for a project to improve the Security features in the Linux Kernel. Prior to working at Google he has worked with ARM on Linux Kernel Projects like Energy Aware Scheduling [1] and Intelligent... Read More →

Kernel Runtime Security Instrumentation pdf
Monday August 19, 2019 11:35am - 12:15pm
Sapphire D
  Refereed Presentation
  • Session Slides Included Yes