PickVidsCapsicum: Practical Capabilities for UNIX
推荐理由
to sandbox chromium with capsicum it took 100 LOC, to sandbox chromium with SELinux it took 200 LOC
说明
这是2010年由USENIX发布的一部演讲，主题归在Security & hacking。它讲的是capability-based sandboxing这一支里的具体问题，而不是把整个领域扫一遍。适合想看推导、证明或实现细节的人。内容上可以概括成：Robert Watson presents the Capsicum paper at USENIX Security 2010, describing practical capability-based sandboxing for UNIX. The paper won Best Student Paper.这些读者给出的理由，核心是：Referenced as the authoritative talk on Capsicum, including comparisons of how little code it takes to sandbox programs versus SELinux.讲法不绑某一条新闻，过几年仍然可以当材料看。从2013年到2017年，有0位不同的读者在0个不同月份把它推荐出来，其中明确叫别人去看的有0次。适合一次性看完。讲者把一个判断讲透，演示是在给这个判断配例子。如果已经会了基本定义，就把注意力放在它怎么把capability-based sandboxing变成能跟着复述的例子。
视频信息
- 频道
- USENIX
- 时长
- 34 分 51 秒
- 发布年份
- 2010
同主题更多
- Behind the Scenes of iOS Security
- Why Electronic Voting Is Still A Bad Idea
- USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
- Defcon 18 Changing threats to privacy Moxie Marlinspike Part
- 28c3: The Science of Insecurity
- DEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome