Learn the Skills Netflix, Meta, and Capital One Actually Hire For
Power BI Fundamentals - Create visualizations and dashboards from scratch
Overview
Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This presentation examines the design and implementation of Linux kernel compartmentalization using Intel Protection Keys for Supervisor. It covers PKS, eBPF isolation and mitigations, and how the approach relates to Address-space Isolation.
Syllabus
Intro
Why compartmentalize?
Transient execution attacks Spectre & friends
Memory Protection Keys: PKU/PKS
PKS in-depth
Challenges
PKS eBPF isolation
eBPF mitigations
ASI: Address Space Isolation
Conclusion
Taught by
Linux Foundation