March 2, 2020

166 words 1 min read

SMACK-based Application Whitelisting on AGL

SMACK-based Application Whitelisting on AGL

Application whitelisting is a technology that allows only applications that are explicitly listed in a whitelist to be executed on a computer system. We have implemented two versions of application wh …
Talk Title SMACK-based Application Whitelisting on AGL
Speakers Chuan-Yu Cho (Deputy Director of Information & Communication Research Lab, Industrial Technology Research Institute), Che-Hao Liu (Engineer, Industrial Technology Research Institute, Taiwan)
Conference Open Source Summit + Automotive Linux Summit Japan
Conf Tag
Location Tokyo, Japan
Date Jul 17-19, 2019
URL Talk Page
Slides Talk Slides
Video

Application whitelisting is a technology that allows only applications that are explicitly listed in a whitelist to be executed on a computer system. We have implemented two versions of application whitelisting, one requiring system call interception and kernel modification, and the other requiring only SMACK rule configuration and user-level programming. In this talk, we will detail the SMACK-based application whitelisting implementation, and compare these two implementations in terms of their functionalities, system stability, development efforts, and run-time performance overheads.

performance programming
comments powered by Disqus
How a scientist would improve serverless functions

How a scientist would improve serverless functions

March 2, 2020

Join us if you're curious about how to reliably improve and refactor serverless applications or how to ensure you've covered all the unexpected edge cases that occur in production. Jochem Schulenklopper and Gero Vermaas demonstrate a scientific approach that enables you to release your refactored serverless applications to production with great confidence.
Releasing improved serverless functions with confidence

Releasing improved serverless functions with confidence

March 1, 2020

Jochem Schulenklopper and Gero Vermaas explain and practice an approach that enables you to improve and release serverless functions to production with confidence. You'll make changes in some sample serverless functions running in production, deploy the improved functions to production, and analyze your improvement against the originals.
A Few Effective gcc/clang Optimizations for Embedded Systems

A Few Effective gcc/clang Optimizations for Embedded Systems

February 23, 2020

Compilers toolchains are at the core of the building the Embedded Linux Systems, it affects the full system from bootloaders, kernels to applications and platform software, compilers are software too, …
Trill: The crown jewel of Microsofts streaming pipeline explained

Trill: The crown jewel of Microsofts streaming pipeline explained

February 8, 2020

Trill has been open-sourced, making the streaming engine behind services like the Bing Ads platform available for all to use and extend. James Terwilliger, Badrish Chandramouli, and Jonathan Goldstein dive into the history of and insights from streaming data at Microsoft. They demonstrate how its API can power complex application logic and the performance that gives the engine its name.
Children of Ruby: The different worlds of Elixir and Crystal

Children of Ruby: The different worlds of Elixir and Crystal

January 31, 2020

You program in Ruby but long for greater concurrency. You dream of programs that run instantly when called. You wish everything had clearly defined types. Join Simon St.Laurent to learn how Elixir and Crystal refine the diverse approaches built into Ruby, modifying the syntax and structures of this commonly understood language to address their very different priorities.
How a scientist would improve serverless functions

How a scientist would improve serverless functions

January 16, 2020

How can you reliably improve and refactor serverless applications? How do you ensure you have covered all the unexpected edge cases that occur in production? Gero Vermaas and Jochem Schulenklopper explain and demonstrate a scientific approach (promoted by GitHub in its Scientist library) that enables you to release refactored serverless applications to production with great confidence.