Pass the PMP® Exam on Your First Try — Expert-Led Training
Python, Prompt Engineering, Data Science — Build the Skills Employers Want Now
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore kernel hardening techniques and protection mechanisms in this 38-minute conference talk by Igor Stoppa from Huawei. Delve into new features for securing dynamically and statically allocated memory, and learn how to integrate them into popular data structures like lists and hlists. Discover practical examples of protecting critical data such as IMA measurements lists and extending existing data structures to reduce attack surfaces. Gain insights into merging upstream, write protection mechanisms using MMU, hypervisor-enforced memory protection, and performance considerations. Benefit from Stoppa's extensive experience in kernel hardening, system integration, and embedded development across companies like Huawei, Intel, and Nokia.
Syllabus
Introduction
Merging upstream: The quest for an example
Read Only vs Write Rare
Write Protection mechanism: the MMU The MMU works at page level
Hypervisor-enforced memory protection
Side effects of the protection
Example of conversion of a function
Missing functionality
Performance limitation Example: lists
Does it work?
Taught by
Linux Foundation