February 5, 2020

196 words 1 min read

An Empirical Study of an Advanced Kernel Tailoring Framework

An Empirical Study of an Advanced Kernel Tailoring Framework

Tailoring the Linux kernel may improve the security of a Linux distro by reducing the attack surface. Junghwan Kang introduced a kernel tailoring framework at OSSummit North America in 2017. The frame …
Talk Title An Empirical Study of an Advanced Kernel Tailoring Framework
Speakers Junghwan Kang (Cyber Security Researcher, The Affiliated Institute of ETRI)
Conference Open Source Summit North America
Conf Tag
Location Vancouver, BC, Canada
Date Aug 27-31, 2018
URL Talk Page
Slides Talk Slides
Video

Tailoring the Linux kernel may improve the security of a Linux distro by reducing the attack surface. Junghwan Kang introduced a kernel tailoring framework at OSSummit North America in 2017. The framework produces a well-working tailored kernel, focusing on the operability of system booting and application running. However, it still has room to improve stability and performance. This year, Junghwan will talk about improvements of the framework including fine-grained tailoring technique and various test conditions. He will also present performance benefits from the tailoring with benchmark results and explain relations between kernel configurations and test conditions. Examples of tailoring the kernel for other Linux distros and the sources of the framework on Github will be introduced as well.

framework security github attack performance
comments powered by Disqus
How CLEVER is your neural network? Robustness evaluation against adversarial examples

How CLEVER is your neural network? Robustness evaluation against adversarial examples

February 3, 2020

Neural networks are particularly vulnerable to adversarial inputs. Carefully designed perturbations can lead a well-trained model to misbehave, raising new concerns about safety-critical and security-critical applications. Pin-Yu Chen offers an overview of CLEVER, a comprehensive robustness measure that can be used to assess the robustness of any neural network classifiers.
Tutorial: Edge is the Catalyst for Cloud Ready / 5G

Tutorial: Edge is the Catalyst for Cloud Ready / 5G

January 22, 2020

Join us for this tutorial which will address the following:1. Edge Datacenter (NGCO)Presented by Rory Browne, IntelOver the next decade, Next Generation Central Office will be a key strategic location …
Using big data to unlock the delivery of personalized, multilingual real-time chat services for global financial service organizations

Using big data to unlock the delivery of personalized, multilingual real-time chat services for global financial service organizations

January 17, 2020

Financial service clients demand increased data-driven personalization, faster insight-based decisions, and multichannel real-time access. Tim Walpole details how organizations can deliver real-time, vendor-agnostic, personalized chat services and explores issues around security, privacy, legal sign-off, data compliance, and how the internet of things can be used as a delivery platform.
Deep learning for large-scale online fraud detection

Deep learning for large-scale online fraud detection

January 13, 2020

Online fraud is often orchestrated by organized crime rings, who use malicious user accounts to actively target modern online services for financial gain. Ting-Fang Yen shares a real-time, scalable fraud detection solution backed by deep learning and built on Spark and TensorFlow and demonstrates how the system outperforms traditional solutions such as blacklists and machine learning.
Kernel advantages for Istio realized with Cilium

Kernel advantages for Istio realized with Cilium

December 29, 2019

BPF technology is bringing Linux kernel capabilities up to speed with modern workload requirements. Cilium helps make BPF consumable for microservices architectures and enables Istio with the most powerful security solution by way of the kernel. Cynthia Thomas and Romain Lenglet explain why you should use Cilium to enforce API-aware policy while coordinating with Istio.
The IoT botnet wars, Linux devices, and the absence of basic security hardening

The IoT botnet wars, Linux devices, and the absence of basic security hardening

December 24, 2019

Drew Moseley explores the malware infecting Linux IoT devices, including Mirai, Hajime, and BrickerBot, and the vulnerabilities they leverage to enslave or brick connected devices. Drew then walks you through specific vectors they used to exploit devices and covers some security hardening basic concepts and practices that would have largely protected against them.