KVM Forum 2019 has ended
October 31 - November 1
Lyon Convention Centre - Lyon, France
More information for KVM Forum 2019
Back To Schedule
Thursday, October 31 • 14:45 - 15:15
Virtualization Based Hardening: Securing Container Workloads and Beyond - Jun Nakajima, Intel & Andrei Lutas, Bitdefender

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
One concern of container workloads has always been the limited process isolation provided by the hosting OS. With Virtualization Based Hardening (VBH), a new set of security policies can be enforced by an open source thin-layer hypervisor, which can prevent compromised containers from tampering the OS kernel or other containers, through a set of memory exploit and attack techniques. Intel, together with Bitdefender, worked on several memory introspection use-cases designed to defend container workloads against zero day binary exploits. We will review a few CVEs as examples.

In addition, the set of APIs exposed by the HV is intended to assist anyone in implementing hardening modules for containers. The solution can be used for other scenarios, such as debugging. We also present a tool for kernel developers which can help in some uncommon tasks such as finding self-modified kernel code.

avatar for Jun Nakajima

Jun Nakajima

Sr. Principal Engineer, Intel Corp.
Jun Nakajima is a Senior Principal Engineer at the Intel Open Source Technology Center, leading open source virtualization, such as KVM and Xen. Jun presented a number of times at technical conferences, including KVM Forum, Xen Summit, LinuxCon, OpenStack Summit, and USENIX. He has... Read More →

Andrei Lutas

Senior Team Lead, Bitdefender SRL
Andrei joined Bitdefender in October 2008, as a junior virus researcher. Initial responsibilities included reverse engineering of malicious samples, adding signatures for malicious files, developing disinfection routines and developing code-similarity methods and systems. He joined... Read More →

Thursday October 31, 2019 14:45 - 15:15 CET
Forum 2
  KVM Forum Track 1
  • Session Slides Included YES