Skip to content

Commit

Permalink
presentations: Add KRF talk (LSS NA 2019) (#46)
Browse files Browse the repository at this point in the history
presentations: Add KRF talk (LSS NA 2019)
  • Loading branch information
dguido committed Aug 21, 2019
2 parents a3f1a81 + a867e71 commit a8ee1ad
Show file tree
Hide file tree
Showing 3 changed files with 23 additions and 2 deletions.
5 changes: 3 additions & 2 deletions README.md
Expand Up @@ -32,6 +32,7 @@

| Presentation Title | Author(s) | Year |
| --- | --- | --- |
| [It's coming from inside the house: kernel space fault injection with KRF](presentations/It%27s%20coming%20from%20inside%20the%20house%3A%20kernel%20space%20fault%20injection%20with%20KRF) | William Woodruff | 2019 |
| [Binary Symbolic Execution With KLEE-Native](presentations/Binary%20Symbolic%20Execution%20With%20KLEE-Native) | Sai Vegasena | 2019 |
| [Going sicko mode on the Linux Kernel](presentations/Going%20sicko%20mode%20on%20the%20Linux%20Kernel) | William Woodruff | 2019 |
| [Vulnerability Modeling with Binary Ninja](presentations/Vulnerability%20Modeling%20with%20Binary%20Ninja) | Josh Watson | 2018 |
Expand Down Expand Up @@ -152,8 +153,8 @@
| [Blockchain](https://www.blockchain.com/) | Aug 2019 | 4 person-weeks | |
| [RandomX](https://www.arweave.org/) | Jun 2019 | [2 person-weeks](reviews/arweave-randomx.pdf) | [Monero and Arweave to Validate RandomX](https://www.prnewswire.com/news-releases/monero-and-arweave-to-validate-the-proof-of-work-algorithm-randomx-300861697.html) |
| [Numerai](https://numer.ai/homepage) | May 2019 | [3 person-weeks](reviews/numerai.pdf) | [NMR 2.0 is now live!](https://medium.com/numerai/nmr2point0-66a45a9a5e70) |
| [Kubernetes](https://kubernetes.io/) | May 2019 | [2 person-weeks](https://github.com/trailofbits/audit-kubernetes/blob/master/reports/Kubernetes%20Threat%20Model.pdf) |
| [Kubernetes](https://kubernetes.io/) | May 2019 | [3 person-weeks](https://github.com/trailofbits/audit-kubernetes/blob/master/reports/Kubernetes%20White%20Paper.pdf) |
| [Kubernetes](https://kubernetes.io/) | May 2019 | [2 person-weeks](https://github.com/trailofbits/audit-kubernetes/blob/master/reports/Kubernetes%20Threat%20Model.pdf) |
| [Kubernetes](https://kubernetes.io/) | May 2019 | [3 person-weeks](https://github.com/trailofbits/audit-kubernetes/blob/master/reports/Kubernetes%20White%20Paper.pdf) |
| [Kubernetes](https://kubernetes.io/) | May 2019 | [12 person-weeks](https://github.com/trailofbits/audit-kubernetes/blob/master/reports/Kubernetes%20Security%20Review.pdf) | [Kubernetes security matures: Inside the project’s first audit](https://www.helpnetsecurity.com/2019/08/12/kubernetes-security-matures/) |
| [MerkleX](https://merklex.io/) | May 2019 | 4 person-weeks | |
| Interest Token | May 2019 | 2 person-days | |
Expand Down
Binary file not shown.
@@ -0,0 +1,20 @@
It's coming from inside the house: kernel space fault injection with KRF
========================================================================

Fault injection (FI) has become an increasingly popular software testing method, with major
players like Netflix, Microsoft, and Google using automated failures to test the end-to-end
resiliency of their (geographically, functionally) distributed services.

In this talk, William Woodruff presents a lower-level, vulnerability-first approach: by randomly
inducing errors in the system calls made by (targeted) programs, fault injection can be used to
discover incorrect and potentially dangerous assumptions. This talk will cover specific classes of
dangerous assumptions and their potential for exploitation, all motivated by KRF, a kernelspace
fault injector open-sourced by Trail of Bits.

Presented at:

* [Linux Security Summit](https://events.linuxfoundation.org/events/linux-security-summit-north-america-2019/), August 2019

Authored by:

* William Woodruff

0 comments on commit a8ee1ad

Please sign in to comment.