~/panel

Panel Discussion: What is Lacking in Linux Security and What Are or Should We be Doing about This

on YouTube 01h 07m

Panelat Linux Security Summit North America 2020 · 2020-07-01..07-02· [security]

speakers

name:Elena Reshetova

linkedin:elenareshetova

name:Andrew Lutomirski

links:none on file

name:Nayna Jain

links:none on file

name:Emily Ratliff

links:none on file

name:Dmitry Vyukov

links:none on file

name:Christian Brauner

website:https://brauner.io

resources

video:https://youtu.be/VXEMbF4oZoQ

slides:none on file

summary

Calls for treating testing as core: integrate static analysis, unify test formats and crash reporting, and require regression tests for fixes because sisbot found thousands of bugs and releases carry tens of thousands of patches. Propose reducing defects per release by orders of magnitude, adopt hardware-assisted sanitizers (MTE) and probabilistic sampling ASAN for production, and fix benign data races so KCSAN can run. Also push for better exploit-aware reviews and per-patch self-tests to help overloaded maintainers.

AI-written summary · about

chapters (4)

related talks