Capsicum: Practical Capabilities for UNIX
Why it was recommended
to sandbox chromium with capsicum it took 100 LOC, to sandbox chromium with SELinux it took 200 LOC
Reference2trill2spill · Original
What it covers
Robert Watson presents the Capsicum paper at USENIX Security 2010, describing practical capability-based sandboxing for UNIX. The paper won Best Student Paper. It is for someone who wants the derivation, proof, or implementation detail.
Video details
- Channel
- USENIX
- Length
- 34 min 51 sec
- Year
- 2010
More in this topic
- Behind the Scenes of iOS Security
- Why Electronic Voting Is Still A Bad Idea
- USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
- Defcon 18 Changing threats to privacy Moxie Marlinspike Part
- 28c3: The Science of Insecurity
- DEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome