Novel Sandboxing Techniques for Open Source Libraries Using eBPF and KRSI

Learn about a groundbreaking sandboxing approach for open source libraries in this 33-minute conference talk from OpenSSF. Discover how security principles from Google and Firefox's sandboxing techniques can be applied to protect open source packages from exploitation. Explore the implementation of eBPF and KRSI technologies to create sandbox environments that mirror the security benefits found in browser-based and mobile platforms. Follow along with practical code examples demonstrating how to identify and block potential exploits, while understanding how this innovative approach addresses the challenges of keeping pace with rapidly evolving zero-day threats and the growing number of vulnerabilities in open source software packages.