Hellow guys, Welcome to my website, and you are watching Address Space Isolation in the Linux Kernel. and this vIdeo is uploaded by FOSDEM at 2020-07-30T00:04:50-07:00. We are pramote this video only for entertainment and educational perpose only. So, I hop you like our website.
| Name | Address Space Isolation in the Linux Kernel |
| Video Uploader | Video From FOSDEM |
| Upload Date | This Video Uploaded At 30-07-2020 07:04:50 |
| Video Discription | by James Bottomley and Mike Rapoport At: FOSDEM 2020 https://video.fosdem.org/2020/K.1.105/kernel_address_space_isolation.webm Security is a big problem especially in the cloud of container workloads. This presentation investigates improving security in the Linux kernel itself. The first target is securing sensitive application data, for instance, private keys. Address space isolation has been used to protect the kernel and userspace programs from each other since the invention of the virtual memory. Assuming that kernel bugs and therefore exploits are inevitable it might be worth isolating parts of the kernel to minimize damage that these exploits can cause. Moreover, restricted mappings in the kernel mode may improve mitigation of hardware speculation vulnerabilities. There are several ongoing efforts to use restricted address spaces in Linux kernel for various use cases: * speculation vulnerabilities mitigation in KVM * support for memory areas visible only in a single owning context * hardening of the Linux containers We are going to present the approach for the implementation of restricted mappings in the Linux kernel and how this implementation would be used with various use-cases. We are also going to take a closer look at possibility to assign an address space to the Linux namespaces, so that tasks running in namespace A have different view of kernel memory mappings than the tasks running in namespace B. For instance, by keeping all the objects in a network namespace private, we can achieve levels of isolation equivalent to running a separated network stack. Room: K.1.105 (La Fontaine) Scheduled start: 2020-02-01 15:00:00 |
| Category | Science & Technology |
| Tags | Science & Technology Download MP4 | Science & Technology Download MP3 | Science & Technology Download MP4 360p | Science & Technology Download MP4 480p | Science & Technology Download MP4 720p | Science & Technology Download MP4 1080p |
