系統軟體社群議程

System Software Track

篩選條件

議題

向 Linux 核心上游提交更動

TR411 [[ new Date( '2024-08-03 02:00:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-03 02:00:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-03 02:30:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 中文 Chinese
加入行事曆 加入關注 加入關注 已關注

你對 Linux 核心開發有興趣嗎?你在工作上有向上游社群提交更動的需求嗎?想貢獻卻不知道怎麼進行嗎?本次議程將為各位介紹上游開發的流程,以及如何和社群互動。

講者

蔡鎮宇

蔡鎮宇

ChromeOS kernel developer. Upstream maintainer.

System Software Track 系統軟體社群議程 TPZ39S general (30mins)

Refining Data Structure & Algorithm Implementations in the Linux Kernel for Improved Performance

TR411 [[ new Date( '2024-08-03 02:35:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-03 02:35:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-03 03:05:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 中文 Chinese
加入行事曆 加入關注 加入關注 已關注

The library code of the Linux kernel contains numerous fundamental data structures and algorithms, mostly located in the lib/ directory. These have been refined by many skilled developers, resulting in highly efficient implementations. However, further optimization possibilities remain. This talk introduces how data structures and algorithms used in the Linux kernel are implemented, along with recent optimization contributions made to the Linux kernel.

講者

Kuan-Wei Chiu

Kuan-Wei Chiu

In his academic journey, Kuan-Wei Chiu has dedicated himself to contributing to the Linux Kernel, and actively participating in the development of the RISC-V simulator rv32emu. Currently pursuing a computer science master's degree, his focus lies in enhancing both the functionality and performance of these critical software components.

System Software Track 系統軟體社群議程 VKSHDK general (30mins)

CPU scheduler extension with eBPF

TR411 [[ new Date( '2024-08-03 03:10:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-03 03:10:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-03 03:40:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 中文 Chinese
加入行事曆 加入關注 加入關注 已關注

Use eBPF to implement extension of CPU scheduler such that we can introduce different kinds of custom scheduling policies into the kernel without modifying the kernel code or loading kernel modules.

講者

I Hsin Cheng

I Hsin Cheng

Master student at National Cheng Kung University Software Engineer Intern at Appier Ex Software Engineer Intern at Trend micro

System Software Track 系統軟體社群議程 BLBXLX general (30mins)

Optimizing High-Frequency Trading Systems with Userspace RCU

TR411 [[ new Date( '2024-08-03 03:45:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-03 03:45:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-03 04:15:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 英文 English
加入行事曆 加入關注 加入關注 已關注

This proposal explores the innovative application of the open-source Read-Copy-Update (RCU) mechanism to optimize high-frequency trading systems. RCU is a powerful synchronization technique that enables rapid data access, which is crucial in trading environments where milliseconds can make the difference between success and failure.

We will introduce the different flavors of Userspace RCU and delve into the specific implementation details of the RCU variant we used in a real-world case study. By sharing this practical example, we will demonstrate techniques for integrating Userspace RCU to significantly improve real-time data handling and system responsiveness in high-frequency trading applications. Attendees will learn how to select the most appropriate RCU flavor and effectively incorporate it to address the unique challenges of these low-latency systems.

The overarching goal is to showcase how leveraging RCU can boost the performance of high-frequency trading, while also encouraging innovative approaches to tackle the technical obstacles inherent in this domain.

講者

葉家郡

葉家郡

Jia-Jun Yeh, a seasoned principal software engineer specializing in FinTech, blends deep computer science knowledge with expertise in C++ and Go. He has evolved into a skilled Kubernetes administrator and application developer, demonstrating exceptional adaptability and swift learning. Over the past few years, Jia-Jun has confidently embraced a significant leadership role, steering his team towards innovation and collective achievement with decisive direction.

System Software Track 系統軟體社群議程 VZGXSS general (30mins)

打造 Linux 風格的即時作業系統應用於四軸飛行器控制

TR411 [[ new Date( '2024-08-03 05:00:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-03 05:00:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-03 05:30:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 中文 Chinese
加入行事曆 加入關注 加入關注 已關注

本演講將介紹開源即時作業系統 Tenok 的開發過程,並應用於四軸飛行器控制。

此演講的主題圍繞在 Tenok ,一個具有 Linux 風格的即時作業系統。本演講將針對即時作業系統以及四軸飛行器原理進行說明,同時展示在 Tenok 上建立四軸飛行器軟體的最小實作。歡迎對嵌入式系統及無人機應用有興趣之聽眾參與。

此演講為 COSCUP 2023 以下講題之延續: "Tenok: 打造用於機器人控制的微型即時作業系統"

GitHub 連結: https://github.com/tenok-rtos/tenok

講者

鄭聖文

鄭聖文

畢業自陽明交通大學 (機器人碩士學程,2021年) 及靜宜大學 (資訊工程系,2019年),主要興趣為機器人系統、嵌入式系統以及即時作業系統。曾參與開發四軸飛行器、定翼機、RISC-V 虛擬機、及小型無人地面載具,且熟悉機器人控制及導航演算法。更詳細的介紹可見: http://wiki.csie.ncku.edu.tw/User/shengwen

System Software Track 系統軟體社群議程 AVPXW9 general (30mins)

ABI 是什麼?跟 API 不一樣嗎?

TR411 [[ new Date( '2024-08-03 05:40:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-03 05:40:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-03 06:10:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 中文 Chinese
加入行事曆 加入關注 加入關注 已關注

儘管 Application Binary Interface (ABI) 通常就比較少人提起,但它的重要性不亞於更常聽到的 Application Programming Interface (API);例如我們到現在還能跑十年前編譯好的程式這件事,就是因爲有 ABI 才有辦法達成(精確地來說是 ABI 相容性的概念)。

這次議程中我們會介紹到底什麼是 ABI、它跟 API 有什麼不同、討論 ABI 相容性及列出 ABI 不相容時會發生什麼事、還有舉出一些 ABI 的實例(Linux Kernel ABI、Python's stable ABI、Foreign Function Interface)。

註:~60% 的內容都是以概念爲主,剩下的部分可能需要有計算機概論的基礎以及稍微看得懂 C 跟 組合語言(沒有的話一樣歡迎來聽)。

講者

Shung-Hsi Yu

Shung-Hsi Yu

Kernel Engineer at SUSE working on BPF

System Software Track 系統軟體社群議程 P9HAZQ general (30mins)

你的執行緒不是你的執行緒,親手打造 Linux 版 DLL injection

TR411 [[ new Date( '2024-08-03 06:15:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-03 06:15:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-03 06:45:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 其他 Others
加入行事曆 加入關注 加入關注 已關注

過去在 Windows Security 的領域裡,DLL injection 會是一個基於 Windows API (VirtualAllocEx, WriteProcessMemory 等等)的手法進行。然而在強調精簡的 UNIX 哲學當中,並沒有對應的系統 API 提供這樣的 Hacking 技巧。雖然提升了動態注入等攻擊的實作難易度,但本次議程希望可以透過 ptrace 親手打造類似功能,進而提升自己對系統軟體的認識。

講者

scc

scc

A senior R&D at TeamT5. I am a modern C++, open source, and open data enthusiast.

System Software Track 系統軟體社群議程 XGQPGA general (30mins)

全向量圖形處理系統: rect clipping 演算法和 fixed point 操作

TR411 [[ new Date( '2024-08-03 06:55:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-03 06:55:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-03 07:25:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 中文 Chinese
加入行事曆 加入關注 加入關注 已關注

本專題旨在探討全向量圖形處理系統的開發,特別聚焦於 rect clipping 演算法和 fixed point 操作的優化與改進。透過精進 fixed point 操作,我們將致力於提高圖形處理的效率和準確性並且降低記憶體頻寬。

講者

林彥甫

林彥甫

我是林彥甫,目前就讀於成功大學。 參加 COSCUP 對我來說是一次珍貴的機會,能夠加速我在開源領域的成長和發展。我希望通過 COSCUP,能夠建立起良好的人脈關係,找到合適的開源項目並積極參與其中,為開源社區的建設貢獻自己的一份力量。

我期待著在 COSCUP 上與大家一起學習、交流,並共同探索開源技術的無限可能性。

System Software Track 系統軟體社群議程 MWHX7P general (30mins)

從零開始建構 C 語言最佳化編譯器

TR411 [[ new Date( '2024-08-03 07:30:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-03 07:30:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-03 08:00:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 中文 Chinese
加入行事曆 加入關注 加入關注 已關注

儘管許多大學仍然有開設編譯器課程,部份學系甚至將其列為必修,但隨著異質多核在內運算模型的變遷,編譯器技術隨之已有相當不同的面貌。但絕大多數的大學課程僅能勉強涵蓋到語法解析與指令生成,遑論要探討各式最佳化議題。 本議程將介紹一項從無到有開發 C 語言編譯器的嘗試:首先實作 C 語言的解析器與支援 Arm 和 RISC-V 處理器架構的編譯器後端,使其能不依賴任何組譯器或連結器達成自我編譯 (self-hosting),隨後引入 SSA (static single assignment form) 及一系列的最佳化策略,以不到萬行的 C 程式碼建構這個小而精巧的最佳化編譯器。

講者

陳孟鴻

陳孟鴻

目前就讀於國立成功大學電機工程學系,熱愛各項系統軟體技術。

System Software Track 系統軟體社群議程 LRBFCW general (30mins)

Advancing Hardware Enablement for Ubuntu: A Canonical Strategy

TR411 [[ new Date( '2024-08-04 02:00:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-04 02:00:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-04 02:30:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 中文 Chinese
加入行事曆 加入關注 加入關注 已關注

The continuous evolution of hardware presents both opportunities and challenges for operating system platforms. As an engineering director at Canonical, I will present a comprehensive overview of our strategies and methodologies for hardware enablement on Ubuntu. This talk will cover the spectrum of supported hardware types, the intricacies of our certification program, and our collaborative efforts with hardware manufacturers to ensure Ubuntu's compatibility and performance. We will delve into our time-to-market strategies that enable us to release Ubuntu preloaded products concurrently with other OS offerings. The session will also highlight our scalable approach to quality assurance, including automatic sanity checks and energy consumption optimization, as well as our extensive regression testing protocols. Lastly, we will discuss our ambitions for elevating the quality of Linux hardware enablement to unprecedented levels.

講者

Rex Tsai

Rex Tsai

My name is Rex Tsai, a passionate open source enthusiast and a hands-on developer deeply involved in Taiwan's open source local community. My journey with open source has been quite an adventure, and it's something that's close to my heart. About 12 years back, I took a leap into an exciting role at Canonical, starting off in the trenches as a software engineer. Fast forward to today, and you'll find me steering the ship as an engineering director. It's been quite the ride, leading dynamic teams across multiple countries, and I'm all about fostering collaboration and innovation. I'm always looking forward to the next challenge and opportunity to innovate with my teams. Let's connect and create something awesome together!

自從年輕開始就熱於參與開放原始碼活動與軟體計畫,長期參與台灣本地開源社群的活動。由衷的相信開放原始碼活動的精神,這種文化深深的刻入我的內心。大約十二年前加入 Canonical 成為一位軟體工程師,時至今日、我被授予工程總監的角色帶領的來自多個國家的團隊。一路走來相當精彩,我總是期待的下一個挑戰,並與我的團隊尋找創新的機會。Let's connect and create something awesome together!

System Software Track 系統軟體社群議程 WRNS7H general (30mins)

Hermes - A Time-series Profiling Tool

TR411 [[ new Date( '2024-08-04 02:30:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-04 02:30:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-04 03:00:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 中文 Chinese
加入行事曆 加入關注 加入關注 已關注

Hermes, a versatile time-series profiling tool, offers comprehensive system performance analysis. It operates by executing periodic or oneshot jobs as defined in the configurations, thereby monitoring performance metrics. To minimize impact on system performance, Hermes intelligently skips metric collection if the system loading remains below defined thresholds. This feature ensures that the profiling service can seamlessly run in production environments without causing any disruptions. At present, Hermes supports various approaches, including perf, ftrace, and ebpf, to gather detailed information for performance analysis. This diverse range of supported methods enhances the tool's effectiveness in providing insightful performance metrics. During this presentation, Chengen will delve into the concept and implementation with meticulous detail, providing a comprehensive overview of the subject matter.

講者

Chengendu

Chengendu

目前任職於 Ubuntu,過往工作有 Virtualization / Distributed systems / Linux kernel 等開發經驗。對系統效能分析相關技術具熱誠,目前致力於累積分析經驗及更深入的理解 Linux kernel。

System Software Track 系統軟體社群議程 JGFWEW general (30mins)

Ubuntu Touch: freedom of choices in mobile OS space

TR411 [[ new Date( '2024-08-04 03:10:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-04 03:10:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-04 03:40:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 英文 English
加入行事曆 加入關注 加入關注 已關注

Currently, the mobile operating system is occupied by Apple-Google duopoly, with their iOS and Android (respectively) occupying over 99% of the worldwide mobile OS market share [1]. However, it doesn’t have to be that way.

This talk will talk about Ubuntu Touch (https://ubuntu-touch.io), an alternative operating system for smartphones. It’s not yet another Android fork; rather, Ubuntu Touch is based on Ubuntu Linux and strives to give a truly different choice to freedom- and privacy-conscious users.

This talk will give you the overview of what Ubuntu Touch is, the history of it, and how it’s built, as well as the landscape of Linux-based mobile operating systems in general.

[1] as of February2024. Information comes from Statcounter.

講者

Ratchanan Srirattanamet

Ratchanan Srirattanamet

Ratchanan Srirattanamet is an open source developer, focusing on system development. He has been involved in the development of Ubuntu Touch since 2016, and is now one of the maintainer of Ubuntu Touch in UBports community. He is also interested in web development, system administration, and software licensing.

System Software Track 系統軟體社群議程 DZSGUL general (30mins)

SystemReady IR與MediaTek Genio-1200-EVK:為標準化開源嵌入式系統鋪路

TR411 [[ new Date( '2024-08-04 03:45:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-04 03:45:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-04 04:15:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 中文 Chinese
加入行事曆 加入關注 加入關注 已關注

MediaTek Genio 1200 EVK,搭載MT8395處理器,是一款專為IOT與AI Edge設計的開發套件。透過upstream與SystemReady IR認證,保證了軟韌體標準化,兼容廣泛的作業系統和軟體生態系統,並且提供長期維護的能力。MediaTek的IOT團隊致力於標準化和開放性,以確保技術的透明度和可持續性。本次分享說明SystemReady IR 過程中,upstream的經驗,包括所面臨的挑戰、妥協與解決方案,以及成功的關鍵因素。我們將說明如何與Ubuntu與OpenSuse、ARM的合作克服技術障礙。此外,我們將展示實際的代碼提交和審核過程,並提供實用的建議,幫助其他開發者在進行類似項目時能夠更加順利。分享MediaTek在這一過程中的學習和成長。透過這些努力,MediaTek不僅在技術上取得進步,在開源文化的推廣有所累積,並且提供產品新的競爭力。

Business part slides (pdf): https://tinyurl.com/3wxvm65w Technical part slides (pdf): https://tinyurl.com/2wmedcx2

Business part 錄影: N/A Technical part 預錄影: https://youtu.be/kqTNYxakPTs

講者

Macpaul Lin

Macpaul Lin

馬克泡曾經參與無線路由器、開發板、以及Android智慧型手機晶片等等的產品開發。現任職於聯發科技,參與IOT與Edge AI的開發套件相關工作。業餘時長期參與開源社群活動。

System Software Track 系統軟體社群議程 PB7HSA general (30mins)

Introduction to OP-TEE on RISC-V

TR411 [[ new Date( '2024-08-04 04:55:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-04 04:55:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-04 05:25:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 中文 Chinese
加入行事曆 加入關注 加入關注 已關注

OP-TEE (Open Portable Trusted Execution Environment) is an open-source solution designed to provide secure execution for trusted applications. It operates alongside a rich OS, ensuring data security through isolation. This presentation delves into OP-TEE support for RISC-V, its current status, and includes a demo. The target audience comprises Linux kernel developers and enthusiasts of the RISC-V architecture.

講者

林宇謙

林宇謙

Peter Lin is a Linux engineer working for Andes Technology, one of the leading RISC-V CPU IP provider based in Taiwan.

System Software Track 系統軟體社群議程 ZHBEBH Misc. - Session

D-Bus Usage and Debug Introduction

TR411 [[ new Date( '2024-08-04 06:15:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-04 06:15:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-04 06:45:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 英文 English
加入行事曆 加入關注 加入關注 已關注

D-Bus 是個 Inter Process Communication (IPC) 機制的實做。也是 Linux 生態系中的重要基石之一。不論是 systemd,或是 Desktop Environment (如 GNOME、KDE) 的程式,皆廣泛地使用 D-Bus 來達成各程式間的資訊詢問、交換與通知。讓各程式可以有效分工與合作,並專注於本身的工作需求。例如,顯示電池電量的 Widget 可以透過 D-Bus 詢問 UPower 取得系統電池目前資訊;當有 USB storage 插入系統時,udisks 會廣播相關訊號,系統上對這訊號有興趣的程式就可以做相對應的接續動作。本次分享除了 D-Bus 的介紹外,也會透過範例程式來說明如何使用 D-Bus,以及如何使用 D-Bus 相關的 debug 工具。

講者

Jian-Hong Pan (StarNight)

Jian-Hong Pan (StarNight)

一位熱血工程師

System Software Track 系統軟體社群議程 7CYTNY general (30mins)

Microkernel operating systems - KasperskyOS

TR411 [[ new Date( '2024-08-04 06:50:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-04 06:50:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-04 07:20:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 英文 English
加入行事曆 加入關注 加入關注 已關注

Microkernel operating systems have a wide range of advantages: high security, scalability, fault tolerance. And nowadays more and more companies are announcing the release of their products based on microkernel operating systems. We will discuss the main mechanisms which microkernel operating systems offer to solve cybersecurity problems. Moreover, Kaspersky Lab has developed its own microkernel operating system - KasperskyOS. KasperskyOS is designed to create software and hardware systems that are protected from any, even unknown threats, and does not require overlaid protection tools such as antiviruses. The KasperskyOS microkernel is written entirely from scratch and does not use Linux kernel code. The core of a system is its key architectural component that provides communication between user applications and hardware. Kaspersky Security System – module through which all Inter Process Communications take place. It checks whether each interaction complies with the specified security policies, and if it does not, it denies such interaction. Even if one of the components is hacked, Kaspersky Security System will reduce or minimize possible damage. There is open source version - KasperskyOS Community Edition (CE) that can help to create security applications on Raspberry Pi 4. We will also present the Secure Login example through KasperskyOS CE that demonstrates the use of the Information Obscurity security pattern. The example will show the possibility of transmitting system-critical information through an untrusted environment.

講者

Anastasiya

Anastasiya

Kaspersky Lab, Project Manager

System Software Track 系統軟體社群議程 CRRJ3M general (30mins)

Linux user namespaces: a blessing and a curse

TR411 [[ new Date( '2024-08-04 07:30:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2024-08-04 07:30:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2024-08-04 08:00:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] 英文 English
加入行事曆 加入關注 加入關注 已關注

Unprivileged Linux user namespaces is a rather controversial topic in the security community, Linux Kernel community and in software engineering in general. On one side it allows building unprivileged and sandboxed services and applications, which would otherwise require elevated privileges to successfully run and provide features to their users. Not granting privileges to such applications follows the least privilege principle and makes our systems more secure.

On the other side, this mechanism has been repeatedly used in various vulnerabilities and exploits as a starting attack vector, multiplying the damage and impact of these exploits. And since it became so popular within the offensive industry, many Linux distributions and security guidances started recommending disabling this feature altogether.

There is an ongoing debate whether unprivileged user namespaces provide more security or make the system more vulnerable. In this presentation we will review how user namespaces might help building sandboxed secure applications. But we will also show how a discovered Linux kernel bug turned into a security vulnerability just because user namespaces are available on the system. Finally, we will give recommendations on how to get the best of both worlds: allow well-behaved applications to utilize user namespaces for better security, while blocking the feature for potentially malicious users/code.

講者

Ignat Korchagin

Ignat Korchagin

Ignat is a systems engineer at Cloudflare working mostly on Linux, platforms and hardware security. Ignat’s interests are cryptography, hacking, and low-level programming. Before Cloudflare, Ignat worked as a senior security engineer for Samsung Electronics’ Mobile Communications Division. His solutions may be found in many older Samsung smart phones and tablets. Ignat started his career as a security researcher in the Ukrainian government’s communications services.

System Software Track 系統軟體社群議程 AEAWB7 general (30mins)