Future-Proof Your Career: AI Manager Masterclass
Learn Generative AI, Prompt Engineering, and LLMs for Free
Overview
Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This course examines Control Flow Integrity in the Linux kernel, covering direct and indirect call attacks, compiler-based and alternative implementations, shadow call stacks, signed pointers, and integration upstream.
Syllabus
Introduction
Agenda
Why should anyone care
Writing directly to kernel code
Writable and executable
Simplified view
Read only
Userspace
Attack Methods
Direct Function Calls
Indirect Function Calls
Backward Edge
Writable
Goal
Function Prototypes
Implementation with clang
Implementation without clang
Embedded function prototype
Improved speed
Shadow call stack
Shadow stack
Sign pointers
Getting it upstream
Where are we
How to do it
Live demo
Questions
How does CFI work with the kernel module
Taught by
Linux Foundation