~/talk

TrustBase: An Architecture to Repair and Strengthen...

on YouTube 28m
Talkat 26th USENIX Security Symposium (USENIX Security '17) · 2017-08-16..08-18· [security, software-architecture]

speakers

name:Mark O'Neill
links:none on file
name:Scott Heidbrink
links:none on file
name:Scott Ruoti
links:none on file
name:Jordan Whitehead
github:JordanWhitehead
name:Dan Bunker
links:none on file
name:Luke Dickinson
links:none on file
name:Travis Hendershot
links:none on file
name:Joshua Reynolds
github:joshua-reynolds
name:Kent Seamons
links:none on file
name:Daniel Zappala
bluesky:zappala.bsky.social

resources

video:https://youtu.be/vtakNmF7Icg
slides:none on file

summary

Architecture that moves certificate validation into the OS and demonstrates a Linux prototype that uses a loadable kernel module to intercept socket traffic, suspend TLS handshakes, and query a local policy engine with plugin support (CA checks, pinning, OCSP, CRLsets, DANE, notary, cipher auditing). Prototypes for Android and Windows exist, administrator-controlled policies and capability restrictions prevent local bypasses, tests show negligible overhead and universal compatibility across dozens of apps.

AI-written summary · about

chapters (8)

  1. 0:00Start
  2. 0:13Architecture To Repair and Strengthen Certificate Based Authentication
  3. 7:40Design Goals
  4. 9:20Overview
  5. 14:15Certificate Pinning
  6. 14:33Ocsp Checking and Crl Set Checking
  7. 15:14Cipher Suite Auditor
  8. 22:08Conclusion

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.