Sandboxing Courses and Certifications

OpenSSF

Novel Sandboxing Techniques for Open Source Libraries Using eBPF and KRSI

Discover how to implement advanced sandboxing techniques for open source libraries using eBPF and KRSI technologies to enhance security and protect against vulnerabilities and exploits.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Linux App Summit

Using XDG Desktop Portals for Qt Apps - Linux App Summit 2023

Explore XDG Desktop Portals integration in Qt apps, covering abstracted features, manual implementations, and practical benefits for Linux app development.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

X.Org Foundation

Defense in Depth: Isolating Mesa From the Kernel

Explore advanced security techniques for isolating graphics drivers from kernel access, using virtualization and helper processes to protect against potential exploits in browser environments.

• YouTube
• 15 minutes
• Self-Paced
• Free Video

Sandboxing in Linux with Zero Lines of Code

Explore Linux sandboxing techniques without coding, focusing on process startup stages and practical examples. Learn to enhance security and control system calls effectively.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

NDC Conferences

Sandboxing .NET Assemblies for Fun, Profit and of Course Security

Explore techniques for sandboxing third-party .NET libraries to enhance application security. Learn to create restricted environments, limiting functionality and improving overall security posture.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

NDC Conferences

Sandboxing .NET Assemblies for Fun, Profit and of Course Security

Explore techniques for sandboxing .NET assemblies to enhance application security, limit third-party library risks, and create restricted environments for external modules using AssemblyLoadContext.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

JSConf

Sandboxing Node.js with CoreOS and Docker

Explore secure cloud application development using CoreOS and Docker for sandboxing Node.js and C# code, ensuring data protection and fair resource allocation.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

USENIX Enigma Conference

The Limits of Sandboxing and Next Steps

Exploring sandboxing limitations in Chrome security, discussing OS constraints, and introducing memory safety as a complementary approach to enhance software resilience.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Sandboxing Your Sandbox: Leveraging Hypervisors for WebAssembly Security

Explore advanced techniques for securing Wasm applications using hypervisor-based sandboxing. Learn to address security challenges in multi-tenant environments and leverage hardware virtualization for robust application isolation.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

NDC Conferences

Sandboxing a Linux Application

Explore Linux application sandboxing techniques, including namespaces, file systems, and Seccomp, to isolate and secure your applications while gaining insights into Docker's implementation.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Linux Plumbers Conference

Sandboxing - Containerizing Alternatives to Snap for Printer Applications or CUPS

Explore alternatives to Snap for sandboxing and containerizing Printer Applications and CUPS, discussing security, performance, and compatibility considerations for Linux systems.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Perfect Sandboxing in Bazel - Enforcing Host Filesystem Dependencies

Discover how to achieve perfect sandboxing in Bazel by encoding and enforcing host filesystem dependencies, with practical insights from migrating a 20-year-old codebase and implementing enhanced dependency management.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Linux Sandboxing with Landlock

Explore Linux application self-sandboxing with Landlock, enabling unprivileged processes to create tailored security policies for enhanced protection and least privilege principle.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Sandboxing Wasm Programs - Syscall Isolation Techniques for Edge Computing

Explore Wasm runtime sandboxing techniques, including SELinux, cgroups, and seccomp. Learn about Callander, a novel syscall sandboxing tool, to enhance security in edge computing platforms.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

NDC Conferences

Sandboxing in Linux with Zero Lines of Code

Explore Linux seccomp for process sandboxing without coding. Learn fine-grained controls, performance benefits, and approaches to easily secure applications in any programming language.

• YouTube
• 38 minutes
• Self-Paced
• Free Video