Seccomp Courses and Certifications

Securing Kubernetes Applications by Crafting Custom Seccomp Profiles

Learn to create custom seccomp profiles for Kubernetes workloads, enhancing container security. Explore manual and automated techniques, multi-architecture profiles, and in-cluster enhancements for application-specific security.

• YouTube
• 32 minutes
• On-Demand
• Free Video

Designing to the Worst Case Scenario - Practical System Call Filtering with Seccomp

Learn practical system call filtering with Seccomp to protect embedded Linux systems from vulnerabilities. Explore implementation methods and applications in SystemD and LXC containers.

• YouTube
• 32 minutes
• On-Demand
• Free Video

Linux Plumbers Conference

Seccomp Filtering for Struct Pointers

Explore advanced seccomp filtering techniques for struct pointers, enhancing system call security in Linux environments.

• YouTube
• 31 minutes
• On-Demand
• Free Video

GoLab conference

Test-driven Hardening: Crafting Seccomp Profiles within Test Pipeline

Discover how to enhance software security by integrating Seccomp profile generation into test pipelines, using tools like perf, strace, and Harpoon to automate system call extraction and strengthen protection.

• YouTube
• 15 minutes
• On-Demand
• Free Video

Handling New Syscalls in Seccomp Filters

Explore libseccomp filter challenges with new kernel syscalls and proposed solutions for allow/deny list limitations in container security environments.

• YouTube
• 31 minutes
• On-Demand
• Free Video

USENIX

Playing in the Sandbox - A Study on the Usability of Seccomp

Explore Seccomp sandboxing challenges through a usability study with 7 experienced developers, uncovering why few applications use sandboxing and what improvements could help.

• YouTube
• 11 minutes
• On-Demand
• Free Video

Reinventing Seccomp with eBPF and KRSI for Enhanced Kernel Security

Explore how eBPF and KRSI can enhance Linux kernel security beyond traditional Seccomp capabilities, with practical demonstrations for implementing advanced syscall filtering in containerized environments.

• YouTube
• 26 minutes
• On-Demand
• Free Video

BSidesLV

Hardening Containers with Seccomp - Hands-On Profiles, Pitfalls, and Real Exploits

Master syscall filtering with seccomp to harden containers, generate security profiles, and contain real exploits through hands-on demonstrations and Apache Druid case study.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Linux Plumbers Conference

Seccomp Listeners for Nested Containers

Explore seccomp listener limitations in nested containers and proposed solutions for supporting multiple listeners per process in container runtime environments.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Using Seccomp to Limit the Kernel Attack Surface

Explore seccomp for system call filtering in Linux, covering BPF virtual machine basics, filter examples, and applications in sandboxing and security. Learn implementation techniques and considerations.

• YouTube
• 1 hour 29 minutes
• On-Demand
• Conference Talk

NDC Conferences

Using Seccomp to Limit the Kernel Attack Surface

Explore seccomp for Linux kernel security: limit system calls, write BPF programs, and understand its applications in Docker, browsers, and more. Gain practical insights into this powerful security tool.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Overview and Recent Developments: Seccomp and Small Linux Security Modules

Explore Linux kernel security: seccomp syscall filtering, Yama ptrace-restriction LSM, and LoadPin kernel-file-reading restriction LSM. Learn history, usage, and recent developments from Google engineer Kees Cook.

• YouTube
• 23 minutes
• On-Demand
• Free Video

Seccomp - What Can It Do For You?

Explore seccomp's role in enhancing Linux security, its implementation in Docker and Kubernetes, and learn about its benefits, challenges, and future potential in system call filtering.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Rawkode Academy

Introduction to the Kubernetes Seccomp Operator

Explore Kubernetes Seccomp Operator: enhance security, manage profiles, and implement secure computing mode for improved container isolation and system call control.

• YouTube
• 1 hour 24 minutes
• On-Demand
• Free Video

NDC Conferences

Using Seccomp to Limit the Linux Kernel Attack Surface

Explore seccomp for limiting Linux system calls, enhancing application security. Learn implementation, tools, and considerations for effective use in containers, browsers, and more.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk